An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. An app may be able to access sensitive user data.
CVE-2026-28877
NONE
EPSS 0.02%
Updated Mar 25, 2026
An
https://support.apple.com/en-us/126792
product-security@apple.com
https://support.apple.com/en-us/126794
product-security@apple.com
https://support.apple.com/en-us/126795
product-security@apple.com
https://support.apple.com/en-us/126798
product-security@apple.com
https://support.apple.com/en-us/126799
product-security@apple.com
CVE Details
CVE ID
CVE-2026-28877
Published Date
Mar 25, 2026
Vendor
An
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.02%
Likelihood of exploitation in next 30 days
Percentile:
4.5th percentile (higher than 4.5% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory