CVE-2026-28957

—

CVSS 3.1

3.3 low

EPSS

<1%p2

Published

May 11, 2026 (May 11, 2026)

Modified

Jun 17, 2026

Description

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to capture a user's screen.

Vendors: apple
Products: ipados, iphone os, visionos
Weakness: CWE-284
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.