CVEvulnerability
CVE-2026-84629
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-14
- Last modified
- 2026-09-16
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-862
Description
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user.
Affected configurations
• apple ipados (< 27.0)
• apple iphone os (< 27.0)
• apple tvos (< 27.0)
• apple visionos (< 27.0)
• apple watchos (< 27.0)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://support.apple.com/en-us/149034 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149036 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149037 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149038 Release Notes, Vendor Advisory