CVE-2026-28963

A privacy issue was addressed by removing the vulnerable code

Medium · published May 11, 2026

CVSS v3.1
4.6
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Published
2026-05-11T20:07Z
EPSS history
Timeline
  • 11 MAY 20:07Z
    A privacy issue was addressed by removing the vulnerable code
    cvelistv5