GCVE-1988-2026-0332

Vulnerability from gna-1988 – Published: 2026-09-11 07:55 – Updated: 2026-09-11 07:55
VLAI
Title
APPLE-SA-05-11-2026-5 iOS 15.8.8 and iPadOS 15.8.8
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-05-11-2026-5 iOS 15.8.8 and iPadOS 15.8.8 iOS 15.8.8 and iPadOS 15.8.8 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/127114. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Notification Services Available for: iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation) Impact: Notifications marked for deletion could be unexpectedly retained on the device Description: A logging issue was addressed with improved data redaction. CVE-2026-28950 This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iOS 15.8.8 and iPadOS 15.8.8". All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmoCVgYACgkQ4Ifiq8DH 7PVrBg/+OqcPYDR0LcHnmP5cF1p9dkmnmVX2RfMRmFtM/ExO5LTqhngmcpX0GiOh KsuZ7MsMTHS1/p0hCO9AL0ggdCxOuITVxNmnwaTzxVOwupRZPTcz4YzutO2DRH1L xvgbX7egx4Xs5yJHS1SPu0Msbrkq0I1J8G6vXuxNiUhMsrUbiuRMNDEUJ4A86nxD yUX+/cuS8uD5TjRU14bAdzsvOlnWr+Taxs9AOKGjr0FUPKuqweGVCXK9ec8elxES 4pAlJotXl7vPSWcDXMVKssoHws2W2dCfIvcRQbK40tFNf9qiv6W9Xm7bOztiHuAJ XxslXx7ETvc6PKngKEEQA6U3g+Qvgg4xFdtxNTcDkUkkv985oS+DD3jXVNq61zbj bK/9bodLh60+NPdm9WNuhW4a9EqDMBNl4WOHVS0KADis1iMJS1o61hQiySRpwYJB vRKY3Y0i8hM++wyL/oYyG6K8xyUVbCX8Pm4IjXZ7yc2QXshRWrTSKl+2fLjHLW+E BfQ+DYExOWX3GOc/gSQXsJSDRtneRzajUUaP1kx1knSl3OXPfIN+4o/xIaPeqQqI efH4ZpSpsgbP/rQFVqqKYqaZzgbGoZ4NbA5eTU5gHIe9yVbcP3bIf0QnL+/S0WV/ Z9+bEbD7ZVH/w4Gin43PmxZiKQCxMfk2hFdvvaDPjnY5Y9Ee+e8= =rWDE -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
VULNARCHIVE GNA GNA-1988
GNA scorecard E 38/100 over 556 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
unknown APPLE-SA-05-11-2026-5 iOS Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0332 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-05-11-2026-5 iOS",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-05-11-2026-5 iOS 15.8.8 and iPadOS 15.8.8\n\niOS 15.8.8 and iPadOS 15.8.8 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/127114.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nNotification Services\nAvailable for: iPhone 6s (all models), iPhone 7 (all models), iPhone SE\n(1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch\n(7th generation)\nImpact: Notifications marked for deletion could be unexpectedly retained\non the device\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-28950\n\nThis update is available through iTunes and Software Update on your iOS\ndevice, and will not appear in your computer\u0027s Software Update\napplication, or in the Apple Downloads site. Make sure you have an\nInternet connection and have installed the latest version of iTunes from\nhttps://www.apple.com/itunes/\n\niTunes and Software Update on the device will automatically check\nApple\u0027s update server on its weekly schedule. When an update is\ndetected, it is downloaded and the option to be installed is presented\nto the user when the iOS device is docked. We recommend applying the\nupdate immediately if possible. Selecting Don\u0027t Install will present the\noption the next time you connect your iOS device.\n\nThe automatic update process may take up to a week depending on the day\nthat iTunes or the device checks for updates. You may manually obtain\nthe update via the Check for Updates button within iTunes, or the\nSoftware Update on your device.\n\nTo check that the iPhone, iPod touch, or iPad has been updated:\n\n* Navigate to Settings \n* Select General \n* Select About. The version\nafter applying this update will be \"iOS 15.8.8 and iPadOS 15.8.8\".\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\nZ9+bEbD7ZVH/w4Gin43PmxZiKQCxMfk2hFdvvaDPjnY5Y9Ee+e8=\n=rWDE\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-11T07:55:55Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/May/10"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/May/10"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/en-us/127114"
        },
        {
          "url": "https://www.apple.com/itunes/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/May/10"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-05-11-2026-5 iOS 15.8.8 and iPadOS 15.8.8",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-28950",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0332",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/May/10",
            "automated": true,
            "contentSha256": "899147cc8e1eac69e74658454029a3d003c71c164cdd5a93f2077c2012baefbb",
            "evidenceScore": 6,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/May/10",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-05-11T22:31:55Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0332"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-11T07:55:55Z",
    "dateUpdated": "2026-09-11T07:55:55Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0332"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.