Vulnerabilities

TI-2026-23065 CVE-2026-28877 · GHSA-gm8w-g7pf-24x5

Information disclosure in Apple iOS and iPadOS

LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2026-03-25 Fixed in 18.7.9, 26.4 +2 CWE-200

TI-2026-23070 CVE-2026-28882 · GHSA-jffc-gvjg-4h86

LOW 18

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00199 Published 2026-03-25 Fixed in 18.7.9, 26.4

TI-2026-23058 CVE-2026-28870 · GHSA-4c59-fwcr-3f7g

LOW 24

An information leakage was addressed with additional validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00166 Published 2026-03-25 Fixed in 18.7.9, 26.4