A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the device.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Apple
  • Ios And Ipados
  • Ipados
  • Iphone Os

Configuration 1 [-]

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://www.spirityenterprise.com/managed-detection-response spirity
https://www.spirityenterprise.com/managed-detection-response-microsoft spirity
https://www.spirityenterprise.com/mdr-for-splunk spirity
http://seclists.org/fulldisclosure/2026/Apr/14 cve-icon
http://seclists.org/fulldisclosure/2026/Apr/15 cve-icon
https://support.apple.com/en-us/127002 cve-icon cve-icon
https://support.apple.com/en-us/127003 cve-icon cve-icon
https://support.apple.com/en-us/127112 cve-icon cve-icon
https://support.apple.com/en-us/127113 cve-icon cve-icon
https://support.apple.com/en-us/127114 cve-icon cve-icon
History

Mon, 11 May 2026 23:45:00 +0000

Type Values Removed Values Added
Title Potential Data Exposure via Deleted Notification Logs in iOS/iPadOS

Mon, 11 May 2026 20:45:00 +0000

Type Values Removed Values Added
Description A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2. Notifications marked for deletion could be unexpectedly retained on the device. A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the device.
References

Wed, 29 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
References

Tue, 28 Apr 2026 15:45:00 +0000

Type Values Removed Values Added
Title Potential Data Exposure via Deleted Notification Logs in iOS/iPadOS

Mon, 27 Apr 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os

Thu, 23 Apr 2026 21:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-359
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 22 Apr 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Vendors & Products Apple
Apple ios And Ipados

Wed, 22 Apr 2026 18:30:00 +0000

Type Values Removed Values Added
Description A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2. Notifications marked for deletion could be unexpectedly retained on the device.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-05-11T20:08:29.338Z

Reserved: 2026-03-03T16:36:03.990Z

Link: CVE-2026-28950

cve-icon Vulnrichment

Updated: 2026-04-29T19:32:15.824Z

cve-icon NVD

Status : Modified

Published: 2026-04-22T19:17:00.847

Modified: 2026-05-11T21:18:55.987

Link: CVE-2026-28950

cve-icon Redhat

No data.