Live › vulnerability › CVE-2026-112567
Go to dashboardApple fixed a flaw in its operating systems that lets a malicious application bypass Privacy preferences, the permission controls that gate access to protected data. An attacker who gets a malicious app onto a device can reach data the user had not allowed that app to see.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Anyone running an Apple OS build older than the fixed versions on a device where third-party apps can be installed. The sources do not name the exact privacy category or the setup needed for the bypass. Managed fleets that already push current updates are covered once the update lands.
No product ranges from the sources yet.
sw_vers on macOS.27.2 on iOS, iPadOS, tvOS, visionOS, watchOS; macOS Golden Gate 27.2; macOS Sequoia 15.8.2; macOS Tahoe 26.7.2.27.2.27.2, macOS Sequoia to 15.8.2, or macOS Tahoe to 26.7.2.27.2.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
This page as .md · .json · in your agent: get_signal("CVE-2026-112567")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.