PT-2026-27590 · Apple · Ios+7

Published 2026-03-24 · Updated 2026-04-15 · CVE-2026-28867

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 18.7.7 Apple iPadOS versions prior to 18.7.7 Apple macOS Sequoia versions prior to 15.7.5 Apple macOS Tahoe versions prior to 26.4 Apple tvOS versions prior to 26.4 Apple visionOS versions prior to 26.4 Apple watchOS versions prior to 26.4

Description This issue was addressed with improved authentication. An application may be able to leak sensitive kernel state. The issue also involves leaking TCP data via mDNSResponder.

Recommendations Update to iOS 18.7.7 or later. Update to iPadOS 18.7.7 or later. Update to macOS Sequoia 15.7.5 or later. Update to macOS Tahoe 26.4 or later. Update to tvOS 26.4 or later. Update to visionOS 26.4 or later. Update to watchOS 26.4 or later.

Fix

Related Identifiers

CVE-2026-28867

Affected Products

Apple Macos

Ios

Ipados

Macos Sequoia

Macos Tahoe

Tvos

Visionos

Watchos

References · 15

• https://support.apple.com/en-us/126799 · Vendor Advisory
• https://support.apple.com/en-us/126792 · Vendor Advisory
• https://support.apple.com/en-us/126794 · Vendor Advisory
• https://support.apple.com/en-us/126798 · Vendor Advisory
• https://support.apple.com/en-us/126797 · Vendor Advisory
• https://support.apple.com/en-us/126793 · Vendor Advisory
• https://support.apple.com/en-us/126795 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28867 · Security Note
• https://twitter.com/fernandokarl/status/2036813339410497690 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28867 · Note
• https://twitter.com/VulmonFeeds/status/2036741424536850560 · Twitter Post
• https://twitter.com/TheRabbitPy/status/2038299297318404240 · Twitter Post
• https://twitter.com/TheRabbitPy/status/2038299050072551439 · Twitter Post
• https://twitter.com/CVEarity/status/2044457836617609487 · Twitter Post
• https://twitter.com/speedyfriend433/status/2039495092910927874 · Twitter Post