4.6

CVE-2026-28895

EPSS 0.02%
Veröffentlicht 25.03.2026 00:32:11
Zuletzt bearbeitet 26.03.2026 18:58:05
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protected Apps with the passcode.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ iPadOS Version < 26.4

Apple ≫ iPhone OS Version < 26.4

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.063

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	4.6	0.9	3.6	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://support.apple.com/en-us/126792

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2026-28895

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-28895

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-28895

EUVD