Authorization Issue in iOS, iPadOS, and macOS Products by Apple
CVE-2026-112660

3.3LOW

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Visionos
Vendor
CVE Published:
26 October 2026

What is CVE-2026-112660?

An authorization issue has been identified in certain Apple operating systems, which could allow an app to bypass specific Privacy preferences. This vulnerability has been addressed through improved state management in the affected versions of iOS, iPadOS, macOS, and visionOS, ensuring enhanced user privacy and security.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 15.8.2

References

https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.