CVE-2026-84614
Received Received - Intake

Logic Issue in iOS and iPadOS Allows Lock Screen Contact Access

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: Apple Inc.

Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An attacker with physical access may be able to access contacts from the lock screen.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-27
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-84614
EUVD
EUVD-2026-110251

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Apple iOS and iPadOS 0
Apple iOS and iPadOS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a logic issue in Apple's iOS and iPadOS that allows an attacker with physical access to a device to view contacts from the lock screen. It was addressed with improved checks in iOS 26.7.2, iPadOS 26.7.2, iOS 27, and iPadOS 27.

Detection Guidance

This vulnerability requires physical access to exploit and is specific to iOS/iPadOS lock screen behavior. No network detection commands are applicable. Check if your device is running iOS/iPadOS 26.7.2 or later to confirm the fix is applied.

Impact Analysis

If someone gains physical access to your locked iOS or iPadOS device, they may be able to view your contacts without unlocking the device. This could expose sensitive contact information.

Mitigation Strategies

Update to iOS 26.7.2 or iPadOS 26.7.2 or later. Enable a strong passcode and disable lock screen access to sensitive data like contacts if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84614. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart