Live › vulnerability › CVE-2026-112658
Go to dashboardAn app installed on an Apple device can read sensitive user data because of an input validation flaw, per Apple's advisory text. Apple fixed it in iOS 27.2, iPadOS 27.2 and macOS Golden Gate 27.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Anyone running iOS or iPadOS before 27.2, or macOS Golden Gate before 27.2, on a device where a third-party app could be installed. The sources do not say which data types or configurations are reachable, so the exact exposure is unknown. Managed devices should confirm the update reaches them.
No product ranges from the sources yet.
27.2 for iOS, iPadOS and macOS Golden Gate27.2 or later27.2 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-112658")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.