{"id":"CVE-2026-112432","kind":"vulnerability","aliases":["CVE-2026-112432"],"related":[],"title":"Apple: logging flaw let apps read sensitive user data","description":"A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.","summary":"Apple fixed a logging issue in its operating systems that lets an app access sensitive user data. The sources give no product-level detail beyond the fixed versions.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","ios","ipados","macos","other","tvos","visionos","watchos"],"not_affected_if":["unknown"],"how_to_check":"- unknown","fix":"- Update iOS and iPadOS to `27.2`\n- Update macOS Golden Gate, tvOS, visionOS and watchOS to `27.2`","status":"open","published_at":"2026-10-26T21:17:33+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","triaged_at":"2026-10-26T21:31:41+00:00","updated_at":"2026-10-26T21:31:41+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-26T21:31:41Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `27.2`\n- Update macOS Golden Gate, tvOS, visionOS and watchOS to `27.2`","reach":"local","title":"Apple: logging flaw let apps read sensitive user data","impact":"medium","summary":"Apple fixed a logging issue in its operating systems that lets an app access sensitive user data. The sources give no product-level detail beyond the fixed versions.","category":"other","nicknames":[],"who_cares":["ios","ipados","macos","tvos","visionos","watchos","apple-devices"],"confidence":0.4,"needs_auth":"unknown","worst_case":"A local app reads sensitive user data it should not reach.","analyst_note":"Check Apple's security content page for CVE-2026-112432 to confirm the affected data, prerequisites and whether the issue is local-only.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Devices running Apple operating systems older than 27.2 are affected according to the description. The sources do not say which configurations or app types are needed to reach the data, so unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000546,"input_tokens":3287,"output_tokens":435,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112432':12A,15A '-2026':11A,14A '27.2':70C,73C,77C,79C,81C,83C 'abl':88C 'access':39B,90C 'address':59C 'app':5A,38B,85C 'appl':1A,17B,26B 'apple-devic':16B 'beyond':51B 'cve':10A,13A 'data':9A,42B,62C,93C 'detail':50B 'devic':18B 'fix':27B,53B,67C 'flaw':3A 'gate':76C 'give':45B 'golden':75C 'improv':61C 'io':19B,69C 'ipado':20B,72C 'issu':30B,57C,65C 'let':4A,36B 'level':49B 'log':2A,29B,56C 'maco':21B,74C 'may':86C 'oper':33B 'product':48B 'product-level':47B 'read':6A 'redact':63C 'sensit':7A,40B,91C 'sourc':44B 'system':34B 'tvos':23B,78C 'user':8A,41B,92C 'version':54B 'visiono':24B,80C 'watcho':25B,82C","nicknames":[],"mitigations":[],"who_affected":"Devices running Apple operating systems older than 27.2 are affected according to the description. The sources do not say which configurations or app types are needed to reach the data, so unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:33+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112432","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112432","severity":null,"published_at":"2026-10-26T21:17:33+00:00","modified_at":"2026-10-26T21:17:33+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","fetched_at":"2026-10-26T21:20:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}