CVEvulnerability

CVE-2026-84606

7.5 HIGH Published 2026-09-14 Modified 2026-09-17 Official page ↗
Status
Analyzed
Published
2026-09-14
Last modified
2026-09-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-287, CWE-330, CWE-359

Description

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls.

Affected configurations

• apple ipados (< 27.0) • apple iphone os (< 27.0) • apple macos (< 27.0) • apple visionos (< 27.0)

Related

Weakness · CWE (3)

  • CWE-287 Improper Authentication weakness
  • CWE-330 Use of Insufficiently Random Values weakness
  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness

References