Message Access Vulnerability in Apple iOS and macOS Products
CVE-2026-113960

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 9 November 2026

What is CVE-2026-113960?

A vulnerability exists whereby a user newly added to an iMessage group could access messages sent prior to their inclusion in the group. This flaw could expose private conversations and sensitive information to unintended recipients. Apple has addressed this vulnerability in their recent updates by removing the erroneous code that allowed such access. Users are encouraged to update their devices to the latest versions of iOS, iPadOS, and macOS to mitigate any associated risks.

Affected Version(s)

iOS and iPadOS 0 < 26.7.3

iOS and iPadOS 0 < 27.2.1

macOS 0 < 15.8.3

References

https://support.apple.com/en-us/149715

https://support.apple.com/en-us/149716

https://support.apple.com/en-us/149718

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 9, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113960 Data

JSON