---
id: "CVE-2026-112658"
kind: "vulnerability"
aliases: ["CVE-2026-112658"]
title: "Apple iOS and macOS: input validation flaw exposes sensitive user data"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple-devices", "infrastructure", "ios", "ipados", "macos"]
not_affected_if: ["already-updated-to-27.2"]
published_at: "2026-10-26T21:17:59+00:00"
first_seen_at: "2026-10-26T21:20:29+00:00"
updated_at: "2026-10-26T21:23:52+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112658", "first_seen_at": "2026-10-26T21:20:29+00:00"}]
---

# Apple iOS and macOS: input validation flaw exposes sensitive user data

An app installed on an Apple device can read sensitive user data because of an input validation flaw, per Apple's advisory text. Apple fixed it in iOS 27.2, iPadOS 27.2 and macOS Golden Gate 27.2.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the device version under Settings > General > About (iOS and iPadOS) or Apple menu > About This Mac (macOS)
- Compare against `27.2` for iOS, iPadOS and macOS Golden Gate

## Fix

- Update iOS and iPadOS to `27.2` or later
- Update macOS Golden Gate to `27.2` or later

## Timeline

- 2026-10-26T21:20:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112658

## From the sources

This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_