CVE-2026-64711

Analyzed Analyzed - Analysis Complete

iOS and iPadOS Sensitive Data Leak via App

Publication date: 2026-07-27

Last updated on: 2026-07-28

Assigner: Apple Inc.

Description

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-28

Generated

2026-08-17

AI Q&A

2026-07-28

EPSS Evaluated

2026-08-15

NVD

CVE-2026-64711

EUVD

EUVD-2026-49431

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 14.0 (inc) to 14.8.8 (exc)
apple	macos	From 15.0 (inc) to 15.7.8 (exc)
apple	macos	From 26.0 (inc) to 26.6 (exc)
apple	ipados	to 26.6 (exc)
apple	iphone_os	to 26.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability involves an app potentially leaking sensitive user information due to insufficient entitlement checks. It was addressed by adding stricter checks in updated versions of iOS, iPadOS, and macOS.

Detection Guidance

This vulnerability is specific to Apple operating systems and involves potential sensitive user information leakage. Detection would require checking system versions against the patched releases: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6. Use system update commands like 'softwareupdate --list' on macOS or 'Settings > General > Software Update' on iOS/iPadOS to verify versions.

Impact Analysis

If exploited, this vulnerability could allow an app to access and leak your private data without proper authorization. This may include personal information, credentials, or other sensitive details stored on your device.

Compliance Impact

The provided CVE data does not specify how this vulnerability affects compliance with standards like GDPR or HIPAA. The description only mentions potential sensitive user information leakage without detailing regulatory impacts.

Mitigation Strategies

Update affected systems to the fixed versions: iOS 26.6 or later, iPadOS 26.6 or later, macOS Sequoia 15.7.8 or later, macOS Sonoma 14.8.8 or later, macOS Tahoe 26.6 or later.

Hi! I’m here to help you understand CVE-2026-64711. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70