CVE-2026-28873 — Apple / iOS and iPadOS

CVE-2026-28873

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. An app may be able to circumvent App Privacy Report logging.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 18.7.9; affected 0 before 26.4

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/126792
https://support.apple.com/en-us/127111

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.