GCVE-1988-2026-0330
Vulnerability from gna-1988 – Published: 2026-09-11 07:55 – Updated: 2026-09-11 11:27
VLAI
EPSS
VEX
Title
APPLE-SA-05-11-2026-3 iPadOS 17.7.11
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-05-11-2026-3 iPadOS 17.7.11
iPadOS 17.7.11 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/127112.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Notification Services
Available for: iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch,
and iPad 6th generation
Impact: Notifications marked for deletion could be unexpectedly retained
on the device
Description: A logging issue was addressed with improved data redaction.
CVE-2026-28950
This update is available through iTunes and Software Update on your iOS
device, and will not appear in your computer's Software Update
application, or in the Apple Downloads site. Make sure you have an
Internet connection and have installed the latest version of iTunes from
https://www.apple.com/itunes/
iTunes and Software Update on the device will automatically check
Apple's update server on its weekly schedule. When an update is
detected, it is downloaded and the option to be installed is presented
to the user when the iOS device is docked. We recommend applying the
update immediately if possible. Selecting Don't Install will present the
option the next time you connect your iOS device.
The automatic update process may take up to a week depending on the day
that iTunes or the device checks for updates. You may manually obtain
the update via the Check for Updates button within iTunes, or the
Software Update on your device.
To check that the iPhone, iPod touch, or iPad has been updated:
* Navigate to Settings
* Select General
* Select About. The version
after applying this update will be "iPadOS 17.7.11".
All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----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=YlQb
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
Relationships
reference
GCVE-1988-2026-0330 (this record)
- related CVE-2026-28950
{
"containers": {
"cna": {
"affected": [
{
"product": "Ipados",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-05-11-2026-3 iPadOS 17.7.11\n\niPadOS 17.7.11 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/127112.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nNotification Services\nAvailable for: iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch,\nand iPad 6th generation\nImpact: Notifications marked for deletion could be unexpectedly retained\non the device\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28950\n\nThis update is available through iTunes and Software Update on your iOS\ndevice, and will not appear in your computer\u0027s Software Update\napplication, or in the Apple Downloads site. Make sure you have an\nInternet connection and have installed the latest version of iTunes from\nhttps://www.apple.com/itunes/\n\niTunes and Software Update on the device will automatically check\nApple\u0027s update server on its weekly schedule. When an update is\ndetected, it is downloaded and the option to be installed is presented\nto the user when the iOS device is docked. We recommend applying the\nupdate immediately if possible. Selecting Don\u0027t Install will present the\noption the next time you connect your iOS device.\n\nThe automatic update process may take up to a week depending on the day\nthat iTunes or the device checks for updates. You may manually obtain\nthe update via the Check for Updates button within iTunes, or the\nSoftware Update on your device.\n\nTo check that the iPhone, iPod touch, or iPad has been updated:\n\n* Navigate to Settings \n* Select General \n* Select About. The version\nafter applying this update will be \"iPadOS 17.7.11\".\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n\niQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmoCVdUACgkQ4Ifiq8DH\n7PVKVRAAlTdoPhZ0g/B6f5/zMxR62jWpuC1UyDMviQccbJNapl8c9QHsvMNG04Av\nHyUp2JbiVh+g4jfBlUn31gMoGttzjrEgJrgx6unfxOGny6YtkTwQbXOJ1XWIdXWg\nakLRZ9ENHqVVk252uiotdZd1Trvba6zaBkoUBfYrbB3v0R1bP8ZUvdQ51KwqFsYh\ngMO1txKvAmdkFRce9Zj9kYYg/+TyI0QQDhy9J2s5RPeanCT7DOwslsHxNUux6T+A\n8Eo8x5nXzfLrBKlMJ01OBpMDijhW/cXZ+tTqe9vPkplcRoTKVqq9ssskk6YdgzZT\nqfbvZ2BbB82t/toPzN58PvhmJlzijIG83Xo9KdxZG1Y3BHSYimMXSOfBeT6qIieP\nPr398aMI4o0HEVinY8Ymrl34sqgLuIeaFTengLSN0B4hmG3sVaNDMuwY/Ya5DFhv\n9l2MzZwyxkl2IbgVHXrlzsJOq6PtmMt3x2H01wqRlESSU4Q2haNsa9BxZNMyNOoI\nvABAX85zrhricVJ3rBpNgUhwK3Ir2qpB5uhkb9JxI0jqmcerUBvIrrSJU5qQRf1M\nZlL+iWX3X04rChzhOiB6cSLXNWgoPm08gbX5Cj6RDyDOJlcGaxEQ64IqwRlg3Hzc\nYXWET09wCwl/g//jZk9xTcZuR/mSGXDbKosV6RkeIqASMLfXgzE=\n=YlQb\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-11T11:27:25Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/May/8"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/May/8"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/en-us/127112"
},
{
"url": "https://www.apple.com/itunes/"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/May/8"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-05-11-2026-3 iPadOS 17.7.11",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2026-28950",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0330",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/May/8",
"automated": true,
"contentSha256": "f5896d6b10cac44e41690b98eb8f75e3a780180a025c0b77f89e9e43b14bad32",
"evidenceScore": 6,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/May/8",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-05-11T22:30:46Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0330"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-11T07:55:55Z",
"dateUpdated": "2026-09-11T11:27:25Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0330"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…