CVE-2026-84636
UnknownSummary
An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS. An app may be able to access sensitive user data.
Risk Assessment
A malicious app could access sensitive user information, leading to a confidentiality breach. This may result in identity theft or data leakage.
Recommendation
Update Apple devices to iOS 27/iPadOS 27, tvOS 27, visionOS 27, or watchOS 27. Install apps only from trusted sources.
Other vulnerabilities in Apple iOS/iPadOS/tvOS/visionOS/watchOS
See all- CVE-2026-86895Unknown
An information disclosure issue was addressed with improved state management. The issue affects iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27. A local app may be able to read a persistent account identifier.
- CVE-2026-86893Unknown
A permissions issue was addressed with additional restrictions. The issue affects iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27. An app may be able to read device name.
- CVE-2026-84629Unknown
This issue was addressed with additional entitlement checks. The vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS. An app may be able to fingerprint the user.
Original NVD description (English source)
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.