EUVD-2026-78001
GHSA-prmh-vvr4-vjj9
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description mandates physical access to a trust-paired device (AV:P, not AV:N), and 'read and write arbitrary files' yields C:H and I:H; no availability impact.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
5DescriptionCVE.org
A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.
AnalysisAI
Path traversal in Apple iOS and iPadOS lets an attacker who physically holds a trust-paired iPhone or iPad read and write files outside the intended directory, a high-confidentiality and high-integrity impact on the device's file store. Everything running earlier than iOS/iPadOS 26.7 or iOS/iPadOS 27 is affected, and the vendor-released fixes are iOS 26.7, iPadOS 26.7, iOS 27 and iPadOS 27 (Apple advisories 149034 and 149041). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires PHYSICAL access to the target iPhone/iPad AND an existing trust pairing with that device (a previously accepted 'Trust This Computer'/accessory relationship). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The published CVSS vector (AV:N/AC:L/PR:N/UI:N, base 7.5) directly CONFLICTS with the description, which explicitly states the attacker needs 'physical access to a trust-paired device.' This is an attack vector of PHYSICAL (AV:P), not NETWORK - the 7.5 base score is therefore inflated and should be treated with skepticism; verify with vendor (Apple advisories 149034/149041). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: iOS 26.7, iPadOS 26.7, iOS 27 and iPadOS 27 - update every affected iPhone and iPad to one of these versions via Settings > General > Software Update, and consult Apple advisories https://support.apple.com/en-us/149034 and https://support.apple.com/en-us/149041 for model-specific build numbers. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all iPhones and iPads running iOS/iPadOS versions earlier than 26.7 or 27, inventory managed and BYOD devices, prioritize executive, legal, finance, security, and remote workers, and remind users not to accept 'Trust This Computer' prompts from unknown computers. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Ios And Ipados
View allLocal privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability,
An out-of-bounds write (CWE-787) in Apple's operating system family - iOS/iPadOS, macOS (Sequoia, Tahoe, and Golden Gate
Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause
Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be trigg
Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.
Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, ma
Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected a
We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sou
Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an
Kernel memory corruption in Apple's operating systems lets an app already running on a device trigger a double free (CWE
A locally installed app on Apple iOS/iPadOS (before 27), macOS (before Golden Gate 27, Tahoe 26.7, or Sequoia 15.8), tvO
Denial of service via unexpected app termination affects multiple Apple operating systems, including iOS, iPadOS, macOS,
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today