Medium · 5.5 CVE-2026-28988 EUVD-2026-29282GHSA-8pv7-gjvg-66w2

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS…

Published May 11, 2026 · Updated May 12, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: visionOS Product: watchOS Platform: iOS Platform: macOS

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An app may be able to bypass certain Privacy preferences.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 26.5	26.5
Apple	macOS	< 26.5	26.5
Apple	visionOS	< 26.5	26.5
Apple	watchOS	< 26.5	26.5

Advisories 4

WID-SEC-2026-1459 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026
WID-SEC-2026-1463 Apple macOS Sonoma, macOS Sequoia und macOS Tahoe: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 12, 2026
NCSC-2026-0139 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · May 12, 2026
NCSC-2026-0138 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · May 12, 2026

References