Sensitive Data Exposure in Apple Products due to State Management Flaw
CVE-2026-64721

5.5MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 27 July 2026

What is CVE-2026-64721?

A state management flaw in various Apple operating systems could allow an app to access sensitive user data without proper authorization. This vulnerability underscores the importance of robust state management practices in protecting user data across devices. Apple has addressed this issue in recent updates, reinforcing their commitment to enhancing security in their software ecosystems.

Affected Version(s)

iOS and iPadOS 0 < 18.7.10

iOS and iPadOS 0 < 26.6

macOS 0 < 14.8.8

References

https://support.apple.com/en-us/128066

https://support.apple.com/en-us/128067

https://support.apple.com/en-us/128068

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 27, 2026
Vulnerability Reserved
Jul 20, 2026

CVE-2026-64721 Data

JSON