CVE search · CVE-2026-86920
CVE-2026-86920
medium 5.5
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to access sensitive user data.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- product-security@apple.com
- Weakness
- CWE-862
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
References
- https://support.apple.com/en-us/149034Vendor Advisory
- https://support.apple.com/en-us/149035Vendor Advisory
- https://support.apple.com/en-us/149038Vendor Advisory
- https://support.apple.com/en-us/149227Vendor Advisory
- https://support.apple.com/en-us/149522Vendor Advisory
- https://support.apple.com/en-us/149523Vendor Advisory