GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

GCVE-1988-2026-0268

Vulnerability from gna-1988 – Published: 2026-09-08 08:13 – Updated: 2026-09-09 10:08
VLAI
Title
APPLE-SA-03-24-2026-8 visionOS 26.4
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-03-24-2026-8 visionOS 26.4 visionOS 26.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/126799. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. 802.1X Available for: Apple Vision Pro (all models) Impact: An attacker in a privileged network position may be able to intercept network traffic Description: An authentication issue was addressed with improved state management. CVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven) Accounts Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28877: Rosyna Keller of Totally Not Malicious Software Audio Available for: Apple Vision Pro (all models) Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. CVE-2026-28879: Justin Cohen of Google Audio Available for: Apple Vision Pro (all models) Impact: An attacker may be able to cause unexpected app termination Description: A type confusion issue was addressed with improved memory handling. CVE-2026-28822: Jex Amro CoreMedia Available for: Apple Vision Pro (all models) Impact: Processing an audio stream in a maliciously crafted media file may terminate the process Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative CoreUtils Available for: Apple Vision Pro (all models) Impact: A user in a privileged network position may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved input validation. CVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault) Crash Reporter Available for: Apple Vision Pro (all models) Impact: An app may be able to enumerate a user's installed apps Description: A privacy issue was addressed by removing sensitive data. CVE-2026-28878: Zhongcheng Li from IES Red Team curl Available for: Apple Vision Pro (all models) Impact: An issue existed in curl which may result in unintentionally sending sensitive information via an incorrect connection Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-14524 DeviceLink Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-28876: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs GeoServices Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: An information leakage was addressed with additional validation. CVE-2026-28870: XiguaSec iCloud Available for: Apple Vision Pro (all models) Impact: An app may be able to enumerate a user's installed apps Description: A permissions issue was addressed with additional restrictions. CVE-2026-28880: Zhongcheng Li from IES Red Team CVE-2026-28833: Zhongcheng Li from IES Red Team ImageIO Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-64505 Kernel Available for: Apple Vision Pro (all models) Impact: An app may be able to disclose kernel memory Description: A logging issue was addressed with improved data redaction. CVE-2026-28868: 이동하 (Lee Dong Ha of BoB 0xB6) Kernel Available for: Apple Vision Pro (all models) Impact: An app may be able to leak sensitive kernel state Description: This issue was addressed with improved authentication. CVE-2026-28867: Jian Lee (@speedyfriend433) Kernel Available for: Apple Vision Pro (all models) Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. CVE-2026-20698: DARKNAVY (@DarkNavyOrg) libxpc Available for: Apple Vision Pro (all models) Impact: An app may be able to enumerate a user's installed apps Description: This issue was addressed with improved checks. CVE-2026-28882: Ilias Morad (A2nkF) of Voynich Group, Duy Trần (@khanhduytran0), @hugeBlack Printing Available for: Apple Vision Pro (all models) Impact: An app may be able to break out of its sandbox Description: A path handling issue was addressed with improved validation. CVE-2026-20688: wdszzml and Atuin Automated Vulnerability Discovery Engine Sandbox Profiles Available for: Apple Vision Pro (all models) Impact: An app may be able to fingerprint the user Description: A permissions issue was addressed with additional restrictions. CVE-2026-28863: Gongyu Ma (@Mezone0) Security Available for: Apple Vision Pro (all models) Impact: A local attacker may gain access to user's Keychain items Description: This issue was addressed with improved permissions checking. CVE-2026-28864: Alex Radocea Siri Available for: Apple Vision Pro (all models) Impact: An attacker with physical access to a locked device may be able to view sensitive user information Description: The issue was addressed with improved authentication. CVE-2026-28856: an anonymous researcher UIFoundation Available for: Apple Vision Pro (all models) Impact: An app may be able to cause a denial-of-service Description: A stack overflow was addressed with improved input validation. CVE-2026-28852: Caspian Tarafdar WebKit Available for: Apple Vision Pro (all models) Impact: Processing maliciously crafted web content may prevent Content Security Policy from being enforced Description: This issue was addressed through improved state management. WebKit Bugzilla: 304951 CVE-2026-20665: webb WebKit Available for: Apple Vision Pro (all models) Impact: Processing maliciously crafted web content may bypass Same Origin Policy Description: A cross-origin issue in the Navigation API was addressed with improved input validation. WebKit Bugzilla: 306050 CVE-2026-20643: Thomas Espach WebKit Available for: Apple Vision Pro (all models) Impact: A malicious website may be able to access script message handlers intended for other origins Description: A logic issue was addressed with improved state management. WebKit Bugzilla: 307014 CVE-2026-28861: Hongze Wu and Shuaike Dong from Ant Group Infrastructure Security Team WebKit Available for: Apple Vision Pro (all models) Impact: A malicious website may be able to process restricted web content outside the sandbox Description: The issue was addressed with improved memory handling. WebKit Bugzilla: 308248 CVE-2026-28859: greenbynox, Arni Hardarson WebKit Available for: Apple Vision Pro (all models) Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: The issue was addressed with improved memory handling. WebKit Bugzilla: 306136 CVE-2026-20664: Daniel Rhea, Söhnke Benedikt Fischedick (Tripton), Emrovsky & Switch, Yevhen Pervushyn WebKit Bugzilla: 307723 CVE-2026-28857: Narcis Oliveras Fontàs, Söhnke Benedikt Fischedick (Tripton), Daniel Rhea, Nathaniel Oh (@calysteon) WebKit Sandboxing Available for: Apple Vision Pro (all models) Impact: A maliciously crafted webpage may be able to fingerprint the user Description: An authorization issue was addressed with improved state management. WebKit Bugzilla: 306827 CVE-2026-20691: Gongyu Ma (@Mezone0) Additional recognition AirPort We would like to acknowledge Yashar Shahinzadeh, Saman Ebrahimnezhad, Amir Safari, Omid Rezaii for their assistance. Bluetooth We would like to acknowledge Hamid Mahmoud for their assistance. Captive Network We would like to acknowledge Kun Peeks (@SwayZGl1tZyyy) for their assistance. CipherML We would like to acknowledge Nils Hanff (@nils1729@chaos.social) of Hasso Plattner Institute for their assistance. CloudAttestation We would like to acknowledge Suresh Sundaram, Willard Jansen for their assistance. CoreUI We would like to acknowledge Peter Malone for their assistance. Find My We would like to acknowledge Salemdomain for their assistance. GPU Drivers We would like to acknowledge Jian Lee (@speedyfriend433) for their assistance. ICU We would like to acknowledge Jian Lee (@speedyfriend433) for their assistance. Kernel We would like to acknowledge DARKNAVY (@DarkNavyOrg), Kylian Boulard De Pouqueville From Fuzzinglabs, Patrick Ventuzelo From Fuzzinglabs, Robert Tran, Suresh Sundaram for their assistance. libarchive We would like to acknowledge Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Arni Hardarson for their assistance. libc We would like to acknowledge Vitaly Simonovich for their assistance. Libnotify We would like to acknowledge Ilias Morad (@A2nkF_) for their assistance. LLVM We would like to acknowledge Nathaniel Oh (@calysteon) for their assistance. Messages We would like to acknowledge JZ for their assistance. MobileInstallation We would like to acknowledge Gongyu Ma (@Mezone0) for their assistance. Music We would like to acknowledge Mohammad Kaif (@_mkahmad | kaif0x01) for their assistance. Notes We would like to acknowledge Dawuge of Shuffle Team and Hunan University for their assistance. ppp We would like to acknowledge Dave G. for their assistance. Quick Look We would like to acknowledge Wojciech Regula of SecuRing (wojciechregula.blog), an anonymous researcher for their assistance. Safari We would like to acknowledge @RenwaX23, Farras Givari, Syarif Muhammad Sajjad, Yair for their assistance. Shortcuts We would like to acknowledge Waleed Barakat (@WilDN00B) and Paul Montgomery (@nullevent) for their assistance. Siri We would like to acknowledge Anand Mallaya, Tech consultant, Anand Mallaya and Co., Harsh Kirdolia, Hrishikesh Parmar of Self-Employed for their assistance. Time Zone We would like to acknowledge Abhay Kailasia (@abhay_kailasia) from Safran Mumbai India for their assistance. UIKit We would like to acknowledge AEC, Abhay Kailasia (@abhay_kailasia) from Safran Mumbai India, Bishal Kafle (@whoisbishal.k), Carlos Luna (U.S. Department of the Navy), Dalibor Milanovic, Daren Goodchild, JS De Mattei, Maxwell Garn, Zack Tickman, fuyuu12, incredincomp for their assistance. Wallet We would like to acknowledge Zhongcheng Li from IES Red Team of ByteDance for their assistance. Web Extensions We would like to acknowledge Carlos Jeurissen, Rob Wu (robwu.nl) for their assistance. WebKit We would like to acknowledge Vamshi Paili for their assistance. WebKit Process Model We would like to acknowledge Joseph Semaan for their assistance. Wi-Fi We would like to acknowledge Kun Peeks (@SwayZGl1tZyyy), an anonymous researcher for their assistance. Wi-Fi Connectivity We would like to acknowledge Alex Radocea of Supernetworks, Inc for their assistance. Widgets We would like to acknowledge Marcel Voß, Mitul Pranjay, Serok Çelik for their assistance. Instructions on how to update visionOS are available at https://support.apple.com/kb/HT214009 To check the software version on your Apple Vision Pro, open the Settings app and choose General > About. All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmnDI2MACgkQ4Ifiq8DH 7PWuKA//atH169ExbPVZu20
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Apple APPLE-SA-03-24-2026-8 visionOS Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0268 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-03-24-2026-8 visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-03-24-2026-8 visionOS 26.4\n\nvisionOS 26.4 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/126799.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\n802.1X\nAvailable for: Apple Vision Pro (all models)\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-28865: H\u00e9lo\u00efse Gollier and Mathy Vanhoef (KU Leuven)\n\nAccounts\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-28877: Rosyna Keller of Totally Not Malicious Software\n\nAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-28879: Justin Cohen of Google\n\nAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: An attacker may be able to cause unexpected app termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-28822: Jex Amro\n\nCoreMedia\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-20690: Hossein Lotfi (@hosselot) of Trend Micro Zero Day\nInitiative\n\nCoreUtils\nAvailable for: Apple Vision Pro (all models)\nImpact: A user in a privileged network position may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\ninput validation.\nCVE-2026-28886: Etienne Charron (Renault) and Victoria Martini (Renault)\n\nCrash Reporter\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: A privacy issue was addressed by removing sensitive data.\nCVE-2026-28878: Zhongcheng Li from IES Red Team\n\ncurl\nAvailable for: Apple Vision Pro (all models)\nImpact: An issue existed in curl which may result in unintentionally\nsending sensitive information via an incorrect connection\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-14524\n\nDeviceLink\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-28876: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nGeoServices\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-28870: XiguaSec\n\niCloud\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-28880: Zhongcheng Li from IES Red Team\nCVE-2026-28833: Zhongcheng Li from IES Red Team\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-64505\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to disclose kernel memory\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28868: \uc774\ub3d9\ud558 (Lee Dong Ha of BoB 0xB6)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to leak sensitive kernel state\nDescription: This issue was addressed with improved authentication.\nCVE-2026-28867: Jian Lee (@speedyfriend433)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20698: DARKNAVY (@DarkNavyOrg)\n\nlibxpc\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to enumerate a user\u0027s installed apps\nDescription: This issue was addressed with improved checks.\nCVE-2026-28882: Ilias Morad (A2nkF) of Voynich Group, Duy Tr\u1ea7n\n(@khanhduytran0), @hugeBlack\n\nPrinting\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to break out of its sandbox\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-20688: wdszzml and Atuin Automated Vulnerability Discovery\nEngine\n\nSandbox Profiles\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to fingerprint the user\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-28863: Gongyu Ma (@Mezone0)\n\nSecurity\nAvailable for: Apple Vision Pro (all models)\nImpact: A local attacker may gain access to user\u0027s Keychain items\nDescription: This issue was addressed with improved permissions\nchecking.\nCVE-2026-28864: Alex Radocea\n\nSiri\nAvailable for: Apple Vision Pro (all models)\nImpact: An attacker with physical access to a locked device may be able\nto view sensitive user information\nDescription: The issue was addressed with improved authentication.\nCVE-2026-28856: an anonymous researcher\n\nUIFoundation\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause a denial-of-service\nDescription: A stack overflow was addressed with improved input\nvalidation.\nCVE-2026-28852: Caspian Tarafdar\n\nWebKit\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing maliciously crafted web content may prevent Content\nSecurity Policy from being enforced\nDescription: This issue was addressed through improved state management.\nWebKit Bugzilla: 304951\nCVE-2026-20665: webb\n\nWebKit\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing maliciously crafted web content may bypass Same\nOrigin Policy\nDescription: A cross-origin issue in the Navigation API was addressed\nwith improved input validation.\nWebKit Bugzilla: 306050\nCVE-2026-20643: Thomas Espach\n\nWebKit\nAvailable for: Apple Vision Pro (all models)\nImpact: A malicious website may be able to access script message\nhandlers intended for other origins\nDescription: A logic issue was addressed with improved state management.\nWebKit Bugzilla: 307014\nCVE-2026-28861: Hongze Wu and Shuaike Dong from Ant Group Infrastructure\nSecurity Team\n\nWebKit\nAvailable for: Apple Vision Pro (all models)\nImpact: A malicious website may be able to process restricted web\ncontent outside the sandbox\nDescription: The issue was addressed with improved memory handling.\nWebKit Bugzilla: 308248\nCVE-2026-28859: greenbynox, Arni Hardarson\n\nWebKit\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: The issue was addressed with improved memory handling.\nWebKit Bugzilla: 306136\nCVE-2026-20664: Daniel Rhea, S\u00f6hnke Benedikt Fischedick (Tripton),\nEmrovsky \u0026 Switch, Yevhen Pervushyn\nWebKit Bugzilla: 307723\nCVE-2026-28857: Narcis Oliveras Font\u00e0s, S\u00f6hnke Benedikt Fischedick\n(Tripton), Daniel Rhea, Nathaniel Oh (@calysteon)\n\nWebKit Sandboxing\nAvailable for: Apple Vision Pro (all models)\nImpact: A maliciously crafted webpage may be able to fingerprint the\nuser\nDescription: An authorization issue was addressed with improved state\nmanagement.\nWebKit Bugzilla: 306827\nCVE-2026-20691: Gongyu Ma (@Mezone0)\n\nAdditional recognition\n\nAirPort\nWe would like to acknowledge Yashar Shahinzadeh, Saman Ebrahimnezhad,\nAmir Safari, Omid Rezaii for their assistance.\n\nBluetooth\nWe would like to acknowledge Hamid Mahmoud for their assistance.\n\nCaptive Network\nWe would like to acknowledge Kun Peeks (@SwayZGl1tZyyy) for their\nassistance.\n\nCipherML\nWe would like to acknowledge Nils Hanff (@nils1729@chaos.social) of\nHasso Plattner Institute for their assistance.\n\nCloudAttestation\nWe would like to acknowledge Suresh Sundaram, Willard Jansen for their\nassistance.\n\nCoreUI\nWe would like to acknowledge Peter Malone for their assistance.\n\nFind My\nWe would like to acknowledge Salemdomain for their assistance.\n\nGPU Drivers\nWe would like to acknowledge Jian Lee (@speedyfriend433) for their\nassistance.\n\nICU\nWe would like to acknowledge Jian Lee (@speedyfriend433) for their\nassistance.\n\nKernel\nWe would like to acknowledge DARKNAVY (@DarkNavyOrg), Kylian Boulard De\nPouqueville From Fuzzinglabs, Patrick Ventuzelo From Fuzzinglabs, Robert\nTran, Suresh Sundaram for their assistance.\n\nlibarchive\nWe would like to acknowledge Andreas Jaegersberger \u0026 Ro Achterberg of\nNosebeard Labs, Arni Hardarson for their assistance.\n\nlibc\nWe would like to acknowledge Vitaly Simonovich for their assistance.\n\nLibnotify\nWe would like to acknowledge Ilias Morad (@A2nkF_) for their assistance.\n\nLLVM\nWe would like to acknowledge Nathaniel Oh (@calysteon) for their\nassistance.\n\nMessages\nWe would like to acknowledge JZ for their assistance.\n\nMobileInstallation\nWe would like to acknowledge Gongyu Ma (@Mezone0) for their assistance.\n\nMusic\nWe would like to acknowledge Mohammad Kaif (@_mkahmad | kaif0x01) for\ntheir assistance.\n\nNotes\nWe would like to acknowledge Dawuge of Shuffle Team and Hunan University\nfor their assistance.\n\nppp\nWe would like to acknowledge Dave G. for their assistance.\n\nQuick Look\nWe would like to acknowledge Wojciech Regula of SecuRing\n(wojciechregula.blog), an anonymous researcher for their assistance.\n\nSafari\nWe would like to acknowledge @RenwaX23, Farras Givari, Syarif Muhammad\nSajjad, Yair for their assistance.\n\nShortcuts\nWe would like to acknowledge Waleed Barakat (@WilDN00B) and Paul\nMontgomery (@nullevent) for their assistance.\n\nSiri\nWe would like to acknowledge Anand Mallaya, Tech consultant, Anand\nMallaya and Co., Harsh Kirdolia, Hrishikesh Parmar of Self-Employed for\ntheir assistance.\n\nTime Zone\nWe would like to acknowledge Abhay Kailasia (@abhay_kailasia) from\nSafran Mumbai India for their assistance.\n\nUIKit\nWe would like to acknowledge AEC, Abhay Kailasia (@abhay_kailasia) from\nSafran Mumbai India, Bishal Kafle (@whoisbishal.k), Carlos Luna (U.S.\nDepartment of the Navy), Dalibor Milanovic, Daren Goodchild, JS De\nMattei, Maxwell Garn, Zack Tickman, fuyuu12, incredincomp for their\nassistance.\n\nWallet\nWe would like to acknowledge Zhongcheng Li from IES Red Team of\nByteDance for their assistance.\n\nWeb Extensions\nWe would like to acknowledge Carlos Jeurissen, Rob Wu (robwu.nl) for\ntheir assistance.\n\nWebKit\nWe would like to acknowledge Vamshi Paili for their assistance.\n\nWebKit Process Model\nWe would like to acknowledge Joseph Semaan for their assistance.\n\nWi-Fi\nWe would like to acknowledge Kun Peeks (@SwayZGl1tZyyy), an anonymous\nresearcher for their assistance.\n\nWi-Fi Connectivity\nWe would like to acknowledge Alex Radocea of Supernetworks, Inc for\ntheir assistance.\n\nWidgets\nWe would like to acknowledge Marcel Vo\u00df, Mitul Pranjay, Serok \u00c7elik for\ntheir assistance.\n\nInstructions on how to update visionOS are available\nat https://support.apple.com/kb/HT214009\n\nTo check the software version on your Apple Vision Pro,\nopen the Settings app and choose General \u003e About.\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n\niQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmnDI2MACgkQ4Ifiq8DH\n7PWuKA//atH169ExbPVZu20"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:08:17Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/23"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Mar/23"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/126799"
        },
        {
          "url": "https://support.apple.com/kb/HT214009"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Mar/23"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-03-24-2026-8 visionOS 26.4",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-14524",
              "type": "related"
            },
            {
              "destId": "CVE-2025-64505",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20643",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20664",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20691",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28822",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28833",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28852",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28856",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28857",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28859",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28861",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28863",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28864",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28865",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28867",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28868",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28870",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28876",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28877",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28878",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28879",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28880",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28882",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28886",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0268",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Mar/23",
            "automated": true,
            "contentSha256": "20e9b912111f3b35a48244cdf64fc36f210cee907383c22939324bb25a70f544",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Mar/23",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-03-25T00:04:31Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0268"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T08:13:43Z",
    "dateUpdated": "2026-09-09T10:08:17Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0268"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.