Vulnerability

CERT-In Vulnerability Note CIVN-2026-0210
Information Disclosure Vulnerability in Apple products

Original Issue Date:April 30, 2026

Severity Rating: HIGH

Software Affected

Apple iOS versions prior to 18.7.8 & 26.4.2
Apple iPadOS versions prior to 18.7.8 & 26.4.2

Overview

A vulnerability has been reported in Apple products, which could allow a remote attacker potentially view sensitive information on the targeted system.

Target Audience:
All end-user organizations and individuals, security teams responsible for maintaining and updating Apple products.

Risk Assessment:
High risk of unauthorized access of data and data manipulation.

Impact Assessment:
Information Disclosure.

Description

Apple Inc. is a technology company that develops devices like iPhones and iPads along with their operating systems. iOS (for iPhones) and iPadOS (for iPads) are the software platforms that run and manage these devices.

A vulnerability has been reported in in Apple products due to logging issue in Notification Services. An attacker could exploit this vulnerability by accessing system logs or device storage to recover notification data that was not properly deleted on the targeted system.

Successful exploitation of this vulnerability could allow an attacker potentially view sensitive information on the targeted system.

Solution

Apply appropriate security updates as mentioned in the Apple security updates:
https://support.apple.com/en-us/127002
https://support.apple.com/en-us/127003

References

Apple
https://support.apple.com/en-us/127002
https://support.apple.com/en-us/127003

CVE Name
CVE-2026-28950

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India