CVEvulnerability
CVE-2026-64732
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-07-27
- Last modified
- 2026-10-24
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-284
Description
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.
Affected configurations
• apple ipados (< 26.6)
• apple iphone os (< 26.6)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.apple.com/en-us/127116 support.apple.com
- https://support.apple.com/en-us/128066 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/148287 support.apple.com