PT-2026-39805 · Apple · Ios/Ipados+1

Adriatik Raci · Publicado 2026-05-11 · Atualizado 2026-05-11 · CVE-2026-28957

Mitre

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to capture a user's screen.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-28957

Produtos afetados

Ios/Ipados

Visionos

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-28957 · Nota de Segurança
• https://support.apple.com/en-us/127110 · Nota
• https://support.apple.com/en-us/127120 · Nota
• https://support.apple.com/en-us/127111 · Nota