Skip to content
7.5 High

CVE-2026-112567 This issue was addressed with improved checks

Description

This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected products and versions

Product Affected versions Fixed in
iOS and iPadOS 27.2 earliest → < 27.2 27.2
macOS 27.2 earliest → < 27.2 27.2
macOS 26.7 earliest → < 26.7.2 26.7.2
macOS 15.8 earliest → < 15.8.2 15.8.2
tvOS 27.2 earliest → < 27.2 27.2
visionOS 27.2 earliest → < 27.2 27.2
watchOS 27.2 earliest → < 27.2 27.2

References

Timeline

  1. Published
  2. Last modified
The 2049 CVEs of iOS and iPadOS →
Track this CVE