Cyber Resilience

CVE-2026-28964

High

Published: 11 May 2026

Published
11 May 2026
Modified
12 May 2026
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0004 11.9th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-28964 is a high-severity User Interface (UI) Misrepresentation of Critical Information (CWE-451) vulnerability in Apple Ipados. Its CVSS base score is 7.5 (High).

Operationally, ranked at the 11.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to access sensitive user data.

CWE(s)
CWE-451

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

Insufficient information to map techniques.
Confidence: LOW · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-46311Same product: Apple Ipados
CVE-2025-24221Same product: Apple Ipados
CVE-2025-24095Same product: Apple Ipados
CVE-2026-20677Same product: Apple Ipados
CVE-2026-28906Same product: Apple Ipados
CVE-2025-24257Same product: Apple Ipados
CVE-2026-28962Same product: Apple Ipados
CVE-2025-24154Same product: Apple Ipados
CVE-2026-20616Same product: Apple Ipados
CVE-2026-20626Same product: Apple Ipados

Affected Assets

apple
ipados
≤ 26.5
apple
iphone os
≤ 26.5
apple
visionos
≤ 26.5

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References