Live › vulnerability › CVE-2026-84614
Go to dashboardApple's iOS and iPadOS have a logic flaw that lets a person with physical access read contacts from the lock screen. The fix is in iOS 26.7.2, iPadOS 26.7.2, iOS 27 and iPadOS 27.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Owners of iPhones and iPads running iOS or iPadOS builds older than the fixed versions. The sources describe a physical-access attack on the lock screen and do not say which models or configurations are affected. Devices already on the fixed versions are not affected.
No product ranges from the sources yet.
26.7.2 or later, or to iOS 27 and iPadOS 27.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An attacker with physical access may be able to access contacts from the lock screen.
This page as .md · .json · in your agent: get_signal("CVE-2026-84614")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.