Access Vulnerability in Apple Products and Services
CVE-2026-84508

5.5MEDIUM

Key Information:

Vendor

Apple

Vendor
CVE Published:
20 October 2026

What is CVE-2026-84508?

An access control issue has been identified in Apple's products that may allow unauthorized applications to access protected user data. This vulnerability has been addressed with enhanced validation processes to better secure user information across several platforms, including iOS, iPadOS, macOS, and visionOS. Users are encouraged to update to the latest versions to ensure their data remains secure.

Affected Version(s)

iOS and iPadOS 0 < 27

macOS 0 < 26.7

macOS 0 < 27

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.