An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
7.5Hoch
CVE-2026-112620
Beschreibung
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2. An attacker in a privileged network position may be able to cause a denial-of-service.
Schwachstellentyp (CWE):
CWE-20
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://support.apple.com/en-us/149230 Vendor Advisory
- https://support.apple.com/en-us/149521 Vendor Advisory
- https://support.apple.com/en-us/149524 Vendor Advisory
- https://support.apple.com/en-us/149526 Vendor Advisory
CPE-Treffer (NVD) (5)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*< 27.2cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 27.2cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*≥ 27.0 < 27.2cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*< 27.2cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*< 27.2