CVEvulnerability
CVE-2026-84491
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-14
- Last modified
- 2026-09-16
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-284
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
Affected configurations
• apple ipados (>= 26.0 < 26.7)
• apple iphone os (>= 26.0 < 26.7)
• apple macos (< 27.0)
• apple tvos (< 27.0)
• apple visionos (< 27.0)
• apple watchos (< 27.0)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.apple.com/en-us/149034 Vendor Advisory
- https://support.apple.com/en-us/149035 Vendor Advisory
- https://support.apple.com/en-us/149036 Vendor Advisory
- https://support.apple.com/en-us/149037 Vendor Advisory
- https://support.apple.com/en-us/149038 Vendor Advisory
- https://support.apple.com/en-us/149041 Vendor Advisory