This vulnerability (CVE-2026-28951) involves an authorization issue in Apple iOS and iPadOS that could allow an application to gain root privileges. Apple fixed the issue by improving state management in iOS 18.7.9, iPadOS 18.7.9, and macOS Sequoia 15.7.7, Sonoma 14.8.7, and Tahoe 26.5. The CVSS score is 7.8, indicating high severity, with attack vector local, low attack complexity, and no user interaction required. The vulnerability is categorized under CWE-863 (Improper Authorization). No known exploits have been reported in the wild. The vendor has not explicitly stated the remediation level or patch availability in the provided data, so users should consult the official Apple security updates for confirmation.

Successful exploitation could allow a local app to escalate privileges to root, leading to full system compromise including confidentiality, integrity, and availability impacts. This could enable unauthorized access to sensitive data and control over the device. No known active exploitation has been reported.

Apple has fixed this vulnerability in iOS 18.7.9, iPadOS 18.7.9, and corresponding macOS versions. Users and administrators should apply these official updates as soon as possible. Patch status is not explicitly confirmed in the provided data; therefore, verify the current remediation status and update availability from Apple's official security advisories before taking further action.