EUVD-2026-49431
GHSA-84vx-j768-rcxx
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Local access, low complexity, user interaction required, high confidentiality impact.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
5DescriptionCVE.org
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information.
AnalysisAI
Local information disclosure in Apple iOS and iPadOS 26.6 and earlier, as well as multiple macOS versions, allows an app to leak sensitive user data due to missing entitlement checks. The vulnerability requires user interaction and local access, but has low exploitation probability (EPSS 0.16%) and no known public exploits or active exploitation per CISA KEV.
Technical ContextAI
The vulnerability stems from improper authorization (CWE-285) in Apple's entitlement system, which normally enforces sandbox restrictions and permission controls for apps. CPE data confirms affected products include iOS/iPadOS (versions below 26.6) and macOS (Sequoia <15.7.8, Sonoma <14.8.8, Tahoe <26.6). An app lacking proper entitlements can bypass checks and access sensitive user information that should be protected.
RemediationAI
Apply the vendor-released patches: update iOS and iPadOS to version 26.6, macOS Sequoia to 15.7.8, macOS Sonoma to 14.8.8, and macOS Tahoe to 26.6. No workarounds are documented; installing the updates is the sole remediation. Advisory links: https://support.apple.com/en-us/128066 (iOS/iPadOS), https://support.apple.com/en-us/128067 (macOS Sequoia), https://support.apple.com/en-us/128071 (macOS Sonoma), https://support.apple.com/en-us/128072 (macOS Tahoe).
More in Ios And Ipados
View allLocal privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability,
Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause
Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be trigg
Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.
Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, ma
Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected a
We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sou
Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an
Denial of service via unexpected app termination affects multiple Apple operating systems, including iOS, iPadOS, macOS,
A data protection flaw in multiple Apple operating systems allows a locally-installed app to fingerprint the user. An at
Denial-of-service (unexpected system termination) affects Apple's shared OS platforms - iOS/iPadOS before 26.6, macOS Se
Local denial-of-service in Apple operating systems via a use-after-free vulnerability allows an app to cause unexpected
Same weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today