PT-2026-27592 · Apple · Tvos+6

Xiguasec · Publicado 2026-03-24 · Atualizado 2026-05-11 · CVE-2026-28870

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS, iPadOS, macOS, tvOS, visionOS, watchOS versions prior to 26.4

Description An issue exists where an application may be able to access sensitive user data due to insufficient validation. There is no information available regarding the number of potentially affected devices or any real-world incidents where this issue was exploited.

Recommendations Update to iOS 26.4 or later. Update to iPadOS 26.4 or later. Update to macOS Tahoe 26.4 or later. Update to tvOS 26.4 or later. Update to visionOS 26.4 or later. Update to watchOS 26.4 or later.

Correção

Identificadores relacionados

CVE-2026-28870

Produtos afetados

Apple Macos

Ios

Ipados

Macos Tahoe

Tvos

Visionos

Watchos

Referências · 11

• https://support.apple.com/en-us/126798 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2036713270048952453 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2040322382582485078 · Publicação no Twitter
• https://support.apple.com/en-us/126797 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-28870 · Nota de Segurança
• https://support.apple.com/en-us/127111 · Nota
• https://support.apple.com/en-us/126792 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28870 · Nota
• https://t.me/cveNotify/163115 · Publicação no Telegram
• https://support.apple.com/en-us/126794 · Aviso do Fabricante
• https://support.apple.com/en-us/126799 · Aviso do Fabricante