VULNERABILITY INTELLIGENCE
CVE-2026-28963
CVSS score4.6 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-05-11
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-359
Primary references
- product-security@apple.com — Release Notes, Vendor Advisory