{"id":"CVE-2026-112567","kind":"vulnerability","aliases":["CVE-2026-112567"],"related":[],"title":"Apple: malicious app can bypass privacy preferences on several OSes","description":"This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.","summary":"Apple fixed a flaw in its operating systems that lets a malicious application bypass Privacy preferences, the permission controls that gate access to protected data. An attacker who gets a malicious app onto a device can reach data the user had not allowed that app to see.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","infrastructure","ios","ipados","macos","tvos","visionos","watchos"],"not_affected_if":["already-updated"],"how_to_check":"- Check the installed version under Settings > General > Software Update on iOS, iPadOS, tvOS, visionOS and watchOS, or `sw_vers` on macOS.\n- Compare against the fixed versions: `27.2` on iOS, iPadOS, tvOS, visionOS, watchOS; `macOS Golden Gate 27.2`; `macOS Sequoia 15.8.2`; `macOS Tahoe 26.7.2`.","fix":"- Update iOS and iPadOS to `27.2`.\n- Update macOS Golden Gate to `27.2`, macOS Sequoia to `15.8.2`, or macOS Tahoe to `26.7.2`.\n- Update tvOS, visionOS and watchOS to `27.2`.","status":"open","published_at":"2026-10-26T21:17:50+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:45+00:00","updated_at":"2026-10-26T21:27:45+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:27:45Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `27.2`.\n- Update macOS Golden Gate to `27.2`, macOS Sequoia to `15.8.2`, or macOS Tahoe to `26.7.2`.\n- Update tvOS, visionOS and watchOS to `27.2`.","reach":"local","title":"Apple: malicious app can bypass privacy preferences on several OSes","impact":"medium","summary":"Apple fixed a flaw in its operating systems that lets a malicious application bypass Privacy preferences, the permission controls that gate access to protected data. An attacker who gets a malicious app onto a device can reach data the user had not allowed that app to see.","category":"infrastructure","nicknames":[],"who_cares":["apple","macos","ios","ipados","tvos","visionos","watchos","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Malicious app reads protected data without the user's permission","analyst_note":"Check Apple's security content page for the CVE-2026-112567 entry to confirm which privacy category is bypassed and whether user interaction is needed.","how_to_check":"- Check the installed version under Settings > General > Software Update on iOS, iPadOS, tvOS, visionOS and watchOS, or `sw_vers` on macOS.\n- Compare against the fixed versions: `27.2` on iOS, iPadOS, tvOS, visionOS, watchOS; `macOS Golden Gate 27.2`; `macOS Sequoia 15.8.2`; `macOS Tahoe 26.7.2`.","needs_analyst":true,"not_affected_if":["already-updated"],"who_is_affected":"Anyone running an Apple OS build older than the fixed versions on a device where third-party apps can be installed. The sources do not name the exact privacy category or the setup needed for the bypass. Managed fleets that already push current updates are covered once the update lands.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000682,"input_tokens":3315,"output_tokens":700,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112567':13A,16A '-2026':12A,15A '15.8.2':96C '26.7.2':99C '27.2':86C,89C,93C,101C,103C,105C 'abl':111C 'access':47B 'address':76C 'allow':68B 'app':3A,57B,70B 'appl':1A,17B,26B 'applic':38B,108C 'attack':52B 'bypass':5A,39B,113C 'check':79C 'control':44B 'cve':11A,14A 'data':50B,63B 'devic':60B 'endpoint':18B 'fix':27B,83C 'flaw':29B 'gate':46B,92C 'get':54B 'golden':91C 'improv':78C 'infrastructur':19B 'io':20B,85C 'ipado':21B,88C 'issu':74C,81C 'let':35B 'maco':22B,90C,94C,97C 'malici':2A,37B,56B,107C 'may':109C 'onto':58B 'oper':32B 'ose':10A 'permiss':43B 'prefer':7A,41B,115C 'privaci':6A,40B,114C 'protect':49B 'reach':62B 'see':72B 'sequoia':95C 'sever':9A 'system':33B 'taho':98C 'tvos':23B,100C 'user':65B 'visiono':24B,102C 'watcho':25B,104C","nicknames":[],"mitigations":[],"who_affected":"Anyone running an Apple OS build older than the fixed versions on a device where third-party apps can be installed. The sources do not name the exact privacy category or the setup needed for the bypass. Managed fleets that already push current updates are covered once the update lands.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:50+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112567","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112567","severity":null,"published_at":"2026-10-26T21:17:50+00:00","modified_at":"2026-10-26T21:17:50+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}