Findings

CVE-2026-28863

A permissions issue was addressed with additional restrictions.

Published Mar 25, 2026 · updated Jun 17, 2026 · apple ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to fingerprint the user.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 25, 2026 · NIST NVD

    Detected

    A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to fingerprint the user.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to fingerprint the user.

Affected

  • cpe apple/ipadosversion unspecified
  • cpe apple/iphone osversion unspecified
  • cpe apple/tvosversion unspecified
  • cpe apple/visionosversion unspecified
  • cpe apple/watchosversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-28863

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-28863

    A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to fingerprint the user.

    nvd.nist.gov

References

CVE-2026-28863 · ZeroDay Findings