EUVD-2026-29267
GHSA-g2q6-v25g-hjmv
Severity by source
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Physical access is the sole attack vector per description; no credentials needed; only confidentiality is impacted with no integrity or availability effect.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring.
AnalysisAI
Visual Intelligence in Apple iOS and iPadOS before version 26.5 exposes sensitive user data to anyone with physical access to the device during an active iPhone Mirroring session. The root cause (CWE-359) is unauthorized disclosure of private personal information, fixed by Apple through code removal rather than a behavioral patch. No public exploit exists and EPSS sits at the 6th percentile (0.02%), consistent with the physical-access gate; however, the confidentiality impact is rated High because personal data surfaces without authorization.
Technical ContextAI
Visual Intelligence is Apple's on-device AI feature that uses the camera to recognize objects, text, and scenes and surface contextual information. iPhone Mirroring is a continuity feature allowing a Mac to display and interact with a paired iPhone's screen. The vulnerability (CWE-359: Exposure of Private Personal Information to an Unauthorized Actor) manifests when Visual Intelligence is invoked during an iPhone Mirroring session, bypassing expected access controls and surfacing sensitive data that should not be reachable in that context. The affected CPE is cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*, covering all iOS and iPadOS versions prior to 26.5. Apple's chosen remediation was removal of the vulnerable code path entirely.
RemediationAI
The primary remediation is to update affected devices to iOS 26.5 or iPadOS 26.5, available via Settings > General > Software Update. Apple's advisory at https://support.apple.com/en-us/127110 confirms the fix. As a compensating control prior to patching, organizations or individuals can disable iPhone Mirroring on paired Macs (System Settings > iPhone Mirroring) to eliminate the attack surface; this removes the mirroring functionality entirely as a trade-off. Additionally, enforcing device passcode and ensuring devices are not left unattended with an active iPhone Mirroring session active reduces exposure.
More in Ios And Ipados
View allLocal privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability,
We need answer JSON only. Need carefully construct fields. Need follow instructions. Must use all data. Need risk_assess
Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause
Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be trigg
Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.
Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, ma
Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected a
We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sou
Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an
Denial of service via unexpected app termination affects multiple Apple operating systems, including iOS, iPadOS, macOS,
A data protection flaw in multiple Apple operating systems allows a locally-installed app to fingerprint the user. An at
Denial-of-service (unexpected system termination) affects Apple's shared OS platforms - iOS/iPadOS before 26.6, macOS Se
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today