---
id: "CVE-2026-112500"
kind: "vulnerability"
aliases: ["CVE-2026-112500"]
title: "Apple: Hide My Email can leak the user's real address"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["apple", "ios", "ipados", "macos", "other", "visionos"]
not_affected_if: ["hide-my-email-unused"]
published_at: "2026-10-26T21:17:41+00:00"
first_seen_at: "2026-10-26T21:20:26+00:00"
updated_at: "2026-10-26T21:29:47+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112500", "first_seen_at": "2026-10-26T21:20:26+00:00"}]
---

# Apple: Hide My Email can leak the user's real address

A logic flaw in Apple's Hide My Email feature can expose the user's original email address to the sites or services they sign up with. Fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2 and visionOS 27.2, according to the advisory text.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Update to iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2 or visionOS 27.2 (`27.2`)

## Timeline

- 2026-10-26T21:20:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112500

## From the sources

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's original email address may be leaked when using the Hide My Email feature.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_