High · 7.5 CVE-2026-28964 EUVD-2026-29268GHSA-2899-6rgx-h9c6

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionO…

Published May 11, 2026 · Updated May 12, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: visionOS Platform: iOS

Description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to access sensitive user data.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 26.5	26.5
Apple	visionOS	< 26.5	26.5

Advisories 2

WID-SEC-2026-1459 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026
NCSC-2026-0138 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · May 12, 2026

References

https://support.apple.com/en-us/127110
https://support.apple.com/en-us/127120

EUVD	v3.1	7.5
CISA-ADP	v3.1	7.5