CVE-2026-28864
Full vulnerability record from the local CVENow database.
Description
This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.7.5, macOS Sequoia 15.8.2, macOS Sonoma 14.8.5, macOS Tahoe 26.4, macOS Tahoe 26.7.2, visionOS 26.4, watchOS 26.4. A local attacker may gain access to user's Keychain items.
Severity
LOW
CVSS score
3.3
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2026-03-25 01:17:10.453000
Last modified
2026-10-26 21:18:20.797000
View original CVE JSON
{
"id": "CVE-2026-28864",
"sourceIdentifier": "[email protected]",
"published": "2026-03-25T01:17:10.453",
"lastModified": "2026-10-26T21:18:20.797",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.7.5, macOS Sequoia 15.8.2, macOS Sonoma 14.8.5, macOS Tahoe 26.4, macOS Tahoe 26.7.2, visionOS 26.4, watchOS 26.4. A local attacker may gain access to user's Keychain items."
},
{
"lang": "es",
"value": "Este problema se abordó con una comprobación de permisos mejorada. Este problema está solucionado en iOS 18.7.7 y iPadOS 18.7.7, iOS 26.4 y iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. Un atacante local podría obtener acceso a los elementos del Llavero del usuario."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Apple",
"product": "iOS and iPadOS",
"versions": [
{
"version": "0",
"lessThan": "18.7.7",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "26.4",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "26.7.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "0",
"lessThan": "14.8.5",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "15.7.5",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "15.8.2",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "26.4",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "26.7.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Apple",
"product": "visionOS",
"versions": [
{
"version": "0",
"lessThan": "26.4",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Apple",
"product": "watchOS",
"versions": [
{
"version": "0",
"lessThan": "26.4",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-03-25T14:18:46.672912Z",
"id": "CVE-2026-28864",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-863"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"versionEndExcluding": "18.7.7",
"matchCriteriaId": "118313FD-8CF6-4412-B1A8-4BC3D5C2F519"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"versionStartIncluding": "26.0",
"versionEndExcluding": "26.4",
"matchCriteriaId": "F201257D-2F7C-43AA-BD51-ED5EC98F99E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"versionEndExcluding": "18.7.7",
"matchCriteriaId": "684E10EB-D01A-4E80-8764-B48B554B0B5E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"versionStartIncluding": "26.0",
"versionEndExcluding": "26.4",
"matchCriteriaId": "F7F08C35-7A60-4FEC-8D44-533902F43EDD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "14.0",
"versionEndExcluding": "14.8.5",
"matchCriteriaId": "D66288AF-23BD-407A-81F5-F1DFBF84C622"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.0",
"versionEndExcluding": "15.7.5",
"matchCriteriaId": "DD21D2C9-BBEC-4E8E-B8D2-C92B7E6155E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "26.0",
"versionEndExcluding": "26.4",
"matchCriteriaId": "6CF848CD-25D4-4371-BEF3-1ACCE47AD81F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "26.4",
"matchCriteriaId": "113B9705-BFF0-4357-B1AB-F57052F32361"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "26.4",
"matchCriteriaId": "F6EAF0A5-7CFF-4EF6-9BC7-DB25B213F753"
}
]
}
]
}
],
"references": [
{
"url": "https://support.apple.com/en-us/126792",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/126793",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/126794",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/126795",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/126796",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/126798",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/126799",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/149227",
"source": "[email protected]"
},
{
"url": "https://support.apple.com/en-us/149522",
"source": "[email protected]"
},
{
"url": "https://support.apple.com/en-us/149523",
"source": "[email protected]"
}
]
}