---
id: "CVE-2026-113908"
kind: "vulnerability"
aliases: ["CVE-2026-113908"]
title: "Apple iOS and iPadOS: privacy fix removes sensitive data apps could read"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["apple-devices", "ios", "ipados", "mobile", "other"]
not_affected_if: ["already-on-27.2"]
published_at: "2026-10-26T21:18:07+00:00"
first_seen_at: "2026-10-26T21:20:31+00:00"
updated_at: "2026-10-26T21:21:58+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113908", "first_seen_at": "2026-10-26T21:20:31+00:00"}]
---

# Apple iOS and iPadOS: privacy fix removes sensitive data apps could read

Apple fixed a privacy issue in iOS 27.2 and iPadOS 27.2 by removing sensitive data that was exposed. The sources say an app may be able to access sensitive user data before the fix.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the device version under Settings > General > About (unknown for managed fleets without a command)
- unknown for other checks, the sources do not say

## Fix

- Update iOS to `27.2` or later
- Update iPadOS to `27.2` or later

## Timeline

- 2026-10-26T21:20:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113908

## From the sources

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_