EUVD-2026-49519
GHSA-rg7x-6v9m-w6q2
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessTrick user into installing malicious app
-
DeliveryApp runs locally on device
-
ExploitAbuse missing access check (CWE-200)
-
ExecutionRead sensitive user data
-
ImpactExfiltrate collected data
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V14 - Data Protection Data exposure prevention
MITRE ATT&CK
2 techniques across 2 tactics: Collection, Discovery The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a malicious or malicious-behaving app to be installed and executed locally on the affected Apple device (AV:L, UI:R) - there is no remote or network-reachable path. The 'Information Disclosure' impact only manifests when such an app runs and exercises the flawed access check; it does not require elevated privileges (PR:N) but is inherently limited by the need to get an app onto the device and the user to run it, plus running an unpatched OS version (below iOS/iPadOS/tvOS/visionOS/watchOS/macOS Tahoe 26.6, macOS Sequoia 15.7.8, or macOS Sonoma 14.8.8). |
| Impact | All signals converge on this being a genuine but low-priority issue, not a high-CVSS-inflated one. The CVSS base score is a moderate 5.5, and the vector itself is honest: AV:L (a malicious app must already be running on the device), AC:L, PR:N, UI:R, S:U, C:H/I:N/A:N - a pure confidentiality/information-disclosure flaw with no integrity or availability impact, consistent with CWE-200. EPSS is 0.17% (6th percentile), CISA SSVC scores Exploitation:none, Automatable:no, Technical Impact:partial, and there is no KEV listing and no public exploit. Exploitation status is therefore: no public exploit identified at time of analysis. There are no conflicting signals here - every source (vendor-reported, moderate CVSS, low EPSS, SSVC none) agrees this is a local, sandbox-escape-style data-access bug patched by Apple, appropriate for routine patch-cycle remediation rather than emergency response. The only nuance is that Apple's terse advisory language ('An app may be able to access sensitive user data') gives no detail on which data or which subsystem, so the precise blast radius cannot be verified from the available data. |
| Exploit ScenarioDerived | A user is tricked into installing a malicious or trojanized app from outside the App Store (or a legitimate-looking app that abuses the flaw); when run, the app bypasses access checks to read sensitive user data it should not be able to reach on the same device. No public proof-of-concept exists, and the local attack vector plus required user interaction (installing/running the app) meaningfully limits scale. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 16, 2026
Local information disclosure in Apple iOS/iPadOS 26.x, macOS Tahoe 26.x, macOS Sequoia 15.x, macOS Sonoma 14.x, tvOS 26.x, visionOS 26.x and watchOS 26.x lets an app installed and run by the user read sensitive user data because of insufficient access checks (CWE-200), a flaw Apple fixed in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, visionOS 26.6 and watchOS 26.6. Exploitation requires the user to install and launch a malicious or malicious-behaving app on an unpatched device (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, base 5.5); there is no remote or network-reachable path and no privilege escalation is needed, so the practical exposure is limited to confidentiality on devices where sideloaded or otherwise untrusted apps are allowed. There is no public exploit identified at time of analysis, CISA's SSVC decision framework records exploitation as none and technical impact as partial, and EPSS is only 0.17% (6th percentile), so every signal aligns with a genuine but low-priority issue that should be resolved by routine patch cycles rather than emergency response.
RemediationAI
Vendor-released patches are available: upgrade to iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, visionOS 26.6 and watchOS 26.6, as documented in the Apple advisories at https://support.apple.com/en-us/128066 through https://support.apple.com/en-us/128072 and https://support.apple.com/en-us/148287. Because the attack requires a locally installed app that the user launches, the most effective compensating control for fleets that cannot patch immediately is to restrict app installation on managed devices - enforce App Store-only or allow-listed application deployment through MDM profiles, disable sideloading/developer-mode trust prompts, and on macOS keep Gatekeeper and notarization enforcement enabled and remove any locally approved untrusted developers; the trade-off is reduced flexibility for line-of-business or test builds, and these measures reduce but do not eliminate the risk because a malicious app obtained through legitimate channels could still exercise the flawed access check. Blocking network access or adding endpoint firewalls does not help here since the vector (AV:L) has no network component, and no privilege-escalation-specific hardening is warranted given PR:N with confidentiality-only impact. Prioritize updating macOS Sequoia and Sonoma machines and any iOS/iPadOS devices that permit enterprise sideloading; the EPSS score of 0.17% and SSVC exploitation value of none support scheduling these updates in normal maintenance windows rather than invoking emergency change procedures.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 5 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is a CWE-200 exposure-of-sensitive-information issue caused by what Apple describes only as insufficient checks, addressed by improved validation in the affected system component; Apple credits no external reporter, which is consistent with an internally discovered logic or state-validation gap in a shared framework or service that an app can reach from within its own sandbox. The authoritative CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N precisely frames the boundary conditions: the attack surface is local only (AV:L) with no network-reachable vector, no privileges are required (PR:N) so any sandboxed app is a candidate trigger, user interaction (UI:R) is needed in the form of installing and launching that app, and the sole impacted property is confidentiality (C:H) with no integrity or availability impact. CPE data enumerates Apple iOS and iPadOS, macOS, tvOS, visionOS and watchOS as affected platforms, and EUVD version ranges narrow this to builds below iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6 and watchOS 26.6, indicating a shared cross-platform component rather than an app-specific bug. The reporting source is Apple itself and the technical impact in CISA's SSVC assessment is partial, with automatable exploitation marked no, which is consistent with the need to deliver and run an application locally rather than exploiting a wormable or scan-and-pwn service.
Know when Tvos gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Local malicious app (AV:L) with user interaction to install/run (UI:R); confidentiality-only data access (C:H, I:N, A:N), matching CWE-200; vendor vector is well-calibrated.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
4DescriptionCVE.org
This issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit
An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authenticati
The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01
WebKit memory corruption in Safari 18.6 and multiple Apple platforms allows remote code execution when processing malici
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrar
An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack comp
Apple kernel lock state checking flaw allows a malicious application to cause unexpected changes in memory shared betwee
An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authenticati
Apple kernel memory corruption in multiple operating systems allows a malicious application to cause unexpected system t
Out-of-bounds write (CWE-787) in QtWebEngine before 6.10.1-r2 on Alpine Linux, and in other Chromium-based engines such
WebKit arbitrary code execution via use-after-free memory corruption affects Safari 26.2, iOS/iPadOS 18.7.3 through 26.2
On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor repo
Exploit-DB