Unauthorized Access in Photos Library on iOS and macOS Products by Apple
CVE-2026-112676

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112676?

An access control vulnerability in iOS and macOS products could allow an application to gain unauthorized access to a user's Photos Library. This issue has been addressed with additional entitlement checks in the latest software updates. Users are encouraged to install recent updates to mitigate any potential risks.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 15.8.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112676 Data

JSON