Authorization Flaw in Apple Devices Allowing Unauthorized Contact Additions
CVE-2026-64746
Currently unrated
Key Information:
- Vendor
Apple
- Vendor
- CVE Published:
- 27 July 2026
What is CVE-2026-64746?
An authorization vulnerability exists in certain Apple operating systems, allowing apps to potentially add contacts without the user's explicit consent. This flaw has been addressed in the latest updates for iOS, iPadOS, macOS, visionOS, and watchOS, wherein improved validation mechanisms have been implemented to enhance user security and prevent unauthorized contact manipulation.
Affected Version(s)
iOS and iPadOS 0 < 26.6
macOS 0 < 26.6
visionOS 0 < 26.6