Live › vulnerability › CVE-2026-113898
Go to dashboardApple fixed a logging issue that did not redact data properly in several iOS, iPadOS, macOS, tvOS, visionOS and watchOS releases. A malicious application can bypass Privacy preferences, which means it can reach data the user chose to keep from it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Anyone running the listed Apple operating system versions on devices they manage is in scope. The sources do not say which apps or privacy settings are reachable, so the exposure of a given device is unknown. Devices already on the fixed versions are not affected.
No product ranges from the sources yet.
26.7.2 or 27.2.15.8.2, macOS Tahoe to 26.7.2, and macOS Golden Gate to 27.2.27.2.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
This page as .md · .json · in your agent: get_signal("CVE-2026-113898")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.