Main Vulnerability Database Vulnerabilities #VU131100

Information disclosure in iPadOS and Apple iOS - CVE-2026-28965

Published: May 12, 2026

Vulnerability identifier: #VU131100

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2026-28965

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
iPadOS
Apple iOS

Software vendor:
Apple Inc.

Description

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists due to an error in WidgetKit. An attacker with physical access to device can view restricted content from the lock screen.

Install updates from vendor's website.