Live › vulnerability › CVE-2026-28850
Go to dashboardApple's visionOS has an authorization flaw that was fixed by improved state management in visionOS 27. A malicious or compromised app may be able to read sensitive user data it should not reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of Apple Vision Pro devices running a visionOS release earlier than 27 are exposed to a local app reaching sensitive user data. The sources do not say which apps or data types are involved, and nothing here applies to servers or hosted applications. Teams that only ship software to other platforms can skip it.
No product ranges from the sources yet.
27 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-28850")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.