CVE search · CVE-2026-86880
CVE-2026-86880
medium 5.5
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- product-security@apple.com
- Weakness
- CWE-284
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 5.5 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
References
- https://support.apple.com/en-us/149034Release NotesVendor Advisory
- https://support.apple.com/en-us/149227Release NotesVendor Advisory