Live › vulnerability › CVE-2026-112500
Go to dashboardA logic flaw in Apple's Hide My Email feature can expose the user's original email address to the sites or services they sign up with. Fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2 and visionOS 27.2, according to the advisory text.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Individual Apple device users who use Hide My Email on the affected OS versions; the sources do not describe any enterprise or server-side exposure. Teams that run no Apple devices or do not use Hide My Email can skip it.
No product ranges from the sources yet.
27.2)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's original email address may be leaked when using the Hide My Email feature.
This page as .md · .json · in your agent: get_signal("CVE-2026-112500")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.