עברית

Vulnerability Intelligence

CVE-2026-28957

Low 3.3

Published
Last modified
NVD status
Analyzed

Description

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to capture a user's screen.

Affected products

apple: ipados; apple: iphone os; apple: visionos

References3

Metrics

CVSS 3.1
3.3 LOW Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS — exploit probability
0% percentile: 2 · as of 14 November 2026
CWE
CWE-284

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.