GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

GCVE-1988-2026-0278

Vulnerability from gna-1988 – Published: 2026-09-08 08:13 – Updated: 2026-09-09 10:07
VLAI
Title
APPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8 iOS 18.7.8 and iPadOS 18.7.8 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/127003. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Notification Services Available for: iPhone XR, iPhone XS, iPhone XS Max, iPhone 11 (all models), iPhone SE (2nd generation), iPhone 12 (all models), iPhone 13 (all models), iPhone SE (3rd generation), iPhone 14 (all models), iPhone 15 (all models), iPhone 16 (all models), iPhone 16e, iPad mini (5th generation - A17 Pro), iPad (7th generation - A16), iPad Air (3rd - 5th generation), iPad Air 11-inch (M2 - M3), iPad Air 13-inch (M2 - M3), iPad Pro 11-inch (1st generation - M4), iPad Pro 12.9-inch (3rd - 6th generation), and iPad Pro 13-inch (M4) Impact: Notifications marked for deletion could be unexpectedly retained on the device Description: A logging issue was addressed with improved data redaction. CVE-2026-28950 This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iOS 18.7.8 and iPadOS 18.7.8". All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmnpFugACgkQ4Ifiq8DH 7PViuQ/6A7fJLlPcOq4KCj9px9/OoFv6mVVDd1JIyll7ybiekv1JJ89aHY85mPCV aSChn/cEC3g/HS9d6dtYUINqQ1CWTLsQ6Ic7qW94+e0H2wlw/MzQpp+0BzqR1v7L H4loAeBJjcWfLTs1GMi4TonLPmDFJRvqPlPeowaStqOnhYRF5EygILSMQug0vfAt l8QJE3+ul1cssWuxUDO4RGmEeHcGZXyqg+adR5FG/K7r3FKIfE7xql5wxqjdYCO3 kfyg9phS1n0o9Wei6RUe5TzP7t0sBH68zcqrpHfr5WY4KtuMSil3qlqaok+KlA5k bst7vN643+ilEqp2hnkc0mKpj7QdEUn/F30xl6NUoW45s1oK9qZRrQpaQnDzrYt+ 3cCEnjpY9RTiobvE6U1PmriObIQwKxDTxQcRNeus/6hN8qHsowvW0AGrFm8HyhRC R6bdyXZPpyAtPa5NZmml9T3cj3ZAa1qhceamgBfGwpB96kebCShoErpa+e56Uy6z Rjbdz8J9Y+n3ogfNegiV8IFCo/x08x63xAqIMh+hKn786i04VCuGchfSI7PS8zMf t33BElZ4LeSWzjYvwWFzK2jyMJKaARA6gNP1QXcka3tdnMBw4O28iW4E3vZ2r6B8 AJdh0BSUP0APnwhVLmTYO7k/XUuQ3R6Xq2MpjU0yJ/XSWei62hU= =ETWt -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Impacted products
Vendor Product Version CPE status
Apple APPLE-SA-04-22-2026-2 iOS Affected: unknown
guessed Create a notification for this product.
Relationships
reference GCVE-1988-2026-0278 (this record)

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-04-22-2026-2 iOS",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8\n\niOS 18.7.8 and iPadOS 18.7.8 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/127003.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nNotification Services\nAvailable for: iPhone XR, iPhone XS, iPhone XS Max, iPhone 11 (all\nmodels), iPhone SE (2nd generation), iPhone 12 (all models), iPhone 13\n(all models), iPhone SE (3rd generation), iPhone 14 (all models), iPhone\n15 (all models), iPhone 16 (all models), iPhone 16e, iPad mini (5th\ngeneration - A17 Pro), iPad (7th generation - A16), iPad Air (3rd - 5th\ngeneration), iPad Air 11-inch (M2 - M3), iPad Air 13-inch (M2 - M3),\niPad Pro 11-inch (1st generation - M4), iPad Pro 12.9-inch (3rd - 6th\ngeneration), and iPad Pro 13-inch (M4)\nImpact: Notifications marked for deletion could be unexpectedly retained\non the device\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28950\n\nThis update is available through iTunes and Software Update on your iOS\ndevice, and will not appear in your computer\u0027s Software Update\napplication, or in the Apple Downloads site. Make sure you have an\nInternet connection and have installed the latest version of iTunes from\nhttps://www.apple.com/itunes/\n\niTunes and Software Update on the device will automatically check\nApple\u0027s update server on its weekly schedule. When an update is\ndetected, it is downloaded and the option to be installed is presented\nto the user when the iOS device is docked. We recommend applying the\nupdate immediately if possible. Selecting Don\u0027t Install will present the\noption the next time you connect your iOS device.\n\nThe automatic update process may take up to a week depending on the day\nthat iTunes or the device checks for updates. You may manually obtain\nthe update via the Check for Updates button within iTunes, or the\nSoftware Update on your device.\n\nTo check that the iPhone, iPod touch, or iPad has been updated:\n\n* Navigate to Settings\n* Select General\n* Select About. The version after applying this update\nwill be \"iOS 18.7.8 and iPadOS 18.7.8\".\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\nAJdh0BSUP0APnwhVLmTYO7k/XUuQ3R6Xq2MpjU0yJ/XSWei62hU=\n=ETWt\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:07:12Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Apr/15"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Apr/15"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/en-us/127003"
        },
        {
          "url": "https://www.apple.com/itunes/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Apr/15"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-28950",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0278",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Apr/15",
            "automated": true,
            "contentSha256": "4bfaf40b5e6c02c7b415569b9c9609e5a7421b9417248b2fe11cff6436a59dc0",
            "evidenceScore": 6,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Apr/15",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-04-22T19:13:49Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0278"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T08:13:43Z",
    "dateUpdated": "2026-09-09T10:07:12Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0278"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…