CVEvulnerability
CVE-2026-86904
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-14
- Last modified
- 2026-09-16
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-359
Description
A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission.
Affected configurations
• apple ipados (< 26.7)
• apple iphone os (< 26.7)
• apple watchos (< 27.0)
Related
Weakness · CWE (1)
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/149034 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149037 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149041 Release Notes, Vendor Advisory