[ CVE-2026-113898 · Published 26 Oct 2026 ]
Vulnerability in Apple iOS and iPadOS
CVSS 3.3
EPSS <1%4 agency advisoriesNo fix listed yet
[ Description ]Official description
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
NCSC-NLNCSC-2026-0456
Vulnerabilities fixed in Apple iOS and iPadOS Translated from Dutch
-
NCSC-NLNCSC-2026-0455
Vulnerabilities fixed in Apple MacOS Translated from Dutch
-
CERT-FRCERTFR-2026-AVI-1387
Multiple vulnerabilities in Apple products Translated from French
Multiple vulnerabilities have been discovered in Apple products. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and a breach of data confidentiality. Apple reports that…
-
BSI CERT-BundWID-SEC-2026-4165
Apple iOS, iPadOS, macOS and Safari: Multiple vulnerabilities Translated from German
[ References ]References
- support.apple.com/en-us/149227Vendor Advisory
- support.apple.com/en-us/149230Vendor Advisory
- support.apple.com/en-us/149521Vendor Advisory
- support.apple.com/en-us/149522Vendor Advisory
- support.apple.com/en-us/149523Vendor Advisory
- support.apple.com/en-us/149524Vendor Advisory
- support.apple.com/en-us/149525Vendor Advisory
- support.apple.com/en-us/149526Vendor Advisory