CVE-2026-28995

high
Published 2026-05-11 · Modified 2026-05-12
CVSS v3
8.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v2
VIR risk
8.8

Description

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A malicious app may be able to break out of its sandbox.

Predictions

Exploit likelihood
82%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/en-us/127120

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/en-us/127119

vendor Authored 2026-05-27

Vendor advisory: apple — https://support.apple.com/en-us/127118

vendor Authored 2026-05-27

Vendor advisory: apple — https://support.apple.com/en-us/127115

vendor Authored 2026-05-27

Vendor advisory: apple — https://support.apple.com/en-us/127111

vendor Authored 2026-05-27

Vendor advisory: apple — https://support.apple.com/en-us/127110

OS impact

OSVersionStatusFixed in
ios26.5fixed
ios18.7.9fixed
macos macos26.5fixed
tvos26.5fixed
macos macosaffected18.7.9

References

CWEs

CWE-269

Verify integrity in audit chain (admin only). AS-IS.