CVE-2026-28963

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring.

CVSS v3 4.6 MEDIUM

4.6^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/127110	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::

History

26 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) Se abordó un problema de privacidad al eliminar el código vulnerable. Este problema está solucionado en iOS 26.5 y iPadOS 26.5. Un atacante con acceso físico podría usar Inteligencia Visual para acceder a datos de usuario sensibles durante la Duplicación de iPhone.

Information

Published : 2026-05-11 21:18

Updated : 2026-10-26 18:10

NVD link : CVE-2026-28963

Mitre link : CVE-2026-28963

CVE.ORG link : CVE-2026-28963

JSON object : View

Products Affected

apple

iphone_os
ipados

CWE

CWE-359

Exposure of Private Personal Information to an Unauthorized Actor

{"id": "CVE-2026-28963", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-28963", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-12T18:12:43.262857Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.9}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "0", "lessThan": "26.5", "versionType": "custom"}]}]}], "published": "2026-05-11T21:18:57.283", "references": [{"url": "https://support.apple.com/en-us/127110", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-359"}]}], "descriptions": [{"lang": "en", "value": "A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring."}, {"lang": "es", "value": "Se abord\u00f3 un problema de privacidad al eliminar el c\u00f3digo vulnerable. Este problema est\u00e1 solucionado en iOS 26.5 y iPadOS 26.5. Un atacante con acceso f\u00edsico podr\u00eda usar Inteligencia Visual para acceder a datos de usuario sensibles durante la Duplicaci\u00f3n de iPhone."}], "lastModified": "2026-10-26T18:10:00.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D9FC2C4-7A7C-4330-A226-255428A5D18E", "versionEndExcluding": "26.5"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A70A5FD-8891-4C4E-9D35-F217F95027B5", "versionEndExcluding": "26.5"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}