Live › vulnerability › CVE-2026-112707
Go to dashboardA privacy flaw in iOS and iPadOS let an app identify which other apps the user has installed. Apple fixed it by moving the sensitive data to a protected location.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Owners of iPhones and iPads on iOS or iPadOS versions before the fixed releases can be affected, since any installed app could run the lookup. Managed fleets should confirm devices are on the fixed versions. Devices already on the fixed versions are not affected.
No product ranges from the sources yet.
26.7.2 or later on iOS 26 devices, or 27.2 or later on iOS 27 devices26.7.2 or later on iPadOS 26 devices, or 27.2 or later on iPadOS 27 devicesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to identify what other apps a user has installed.
This page as .md · .json · in your agent: get_signal("CVE-2026-112707")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.