CVE-2026-112707

Received Received - Intake

Privacy Data Exposure in iOS and iPadOS

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: Apple Inc.

Description

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to identify what other apps a user has installed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-26

Last Modified

2026-10-26

Generated

2026-10-27

AI Q&A

2026-10-27

EPSS Evaluated

N/A

NVD

CVE-2026-112707

EUVD

EUVD-2026-110335

Affected Vendors & Products

Vendor	Product	Version / Range
Apple	iOS and iPadOS	0
Apple	iOS and iPadOS	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a privacy issue where an app could potentially detect other apps installed on a user's device. Apple addressed it by moving sensitive data to a protected location in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.

Detection Guidance

This vulnerability involves an app potentially identifying other installed apps. Detection would require checking for suspicious app behavior or unauthorized data access. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow an app to identify other apps on your device, potentially revealing personal information about your activities or preferences without your consent.

Mitigation Strategies

Update iOS and iPadOS to versions 26.7.2, 27.2, or later to address the issue. Remove any untrusted apps and monitor for unusual app activity.

Hi! I’m here to help you understand CVE-2026-112707. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70