CVE-2026-112706
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A permissions issue was addressed with additional restrictions. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.
Risk Assessment
Improper permissions may allow a malicious app to access sensitive data, leading to privacy and security breaches.
Recommendation
Update iOS, iPadOS, tvOS, visionOS, and watchOS to version 27.2 (or 26.7.2 for iOS/iPadOS) to apply the additional permission restrictions.
Other vulnerabilities in Apple iOS/iPadOS/tvOS/visionOS/watchOS
See all- CVE-2026-112692Low risk· EPSS 14%
The issue was addressed with additional entitlement checks. The vulnerability affects iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.
- CVE-2026-86895High
An information disclosure issue was addressed with improved state management. The issue affects iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27. A local app may be able to read a persistent account identifier.
- CVE-2026-86893Low
A permissions issue was addressed with additional restrictions. The issue affects iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27. An app may be able to read device name.
- CVE-2026-84636Medium
An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS. An app may be able to access sensitive user data.
- CVE-2026-84629High
This issue was addressed with additional entitlement checks. The vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS. An app may be able to fingerprint the user.
Original NVD description (English source)
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS