{"id":"CVE-2026-84582","kind":"vulnerability","aliases":["CVE-2026-84582"],"related":[],"title":"Apple iOS and macOS: improved access restrictions fix an app data-access flaw","description":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","summary":"Apple fixed a privacy issue in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27 by tightening access restrictions. The advisory says an app may be able to access sensitive user data.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","ios","ipados","macos","other"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- Update to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 or watchOS 27 (exact build not stated in the sources)","status":"open","published_at":"2026-10-20T01:17:23+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T05:06:13+00:00","updated_at":"2026-10-25T05:06:13+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-25T05:06:13Z","model":"claude-haiku-5-5","output":{"fix":"- Update to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 or watchOS 27 (exact build not stated in the sources)","reach":"local","title":"Apple iOS and macOS: improved access restrictions fix an app data-access flaw","impact":"medium","summary":"Apple fixed a privacy issue in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27 by tightening access restrictions. The advisory says an app may be able to access sensitive user data.","category":"other","nicknames":[],"who_cares":["apple","ios","macos","ipados"],"confidence":0.4,"needs_auth":"unknown","worst_case":"A malicious app reads sensitive user data on the device.","analyst_note":"Check Apple's security release notes for iOS 27 and macOS Golden Gate 27 for the affected component, the CVE entry details and the exact fixed build.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Devices running Apple operating systems before the iOS 27 and macOS Golden Gate 27 releases. The sources do not say which apps or data paths are involved, so the exposed configuration is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000575,"input_tokens":3279,"output_tokens":495,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-84582':17A,20A '27':32B,34B,38B,40B,42B,45B,78C,81C,85C,87C,89C,91C 'abl':57B,96C 'access':6A,13A,48B,59B,70C,98C 'address':67C 'advisori':51B 'app':10A,54B,93C 'appl':1A,21B,25B 'cve':15A,18A 'data':12A,62B,101C 'data-access':11A 'fix':8A,26B,75C 'flaw':14A 'gate':37B,84C 'golden':36B,83C 'improv':5A,69C 'io':2A,22B,31B,77C 'ipado':23B,33B,80C 'issu':29B,65C,73C 'maco':4A,24B,35B,82C 'may':55B,94C 'privaci':28B,64C 'restrict':7A,49B,71C 'say':52B 'sensit':60B,99C 'tighten':47B 'tvos':39B,86C 'user':61B,100C 'visiono':41B,88C 'watcho':44B,90C","nicknames":[],"mitigations":[],"who_affected":"Devices running Apple operating systems before the iOS 27 and macOS Golden Gate 27 releases. The sources do not say which apps or data paths are involved, so the exposed configuration is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:23+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84582","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84582","severity":null,"published_at":"2026-10-20T01:17:23+00:00","modified_at":"2026-10-20T15:03:59+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}