CVE-2026-112658
published 2026-10-26CVE-2026-112658: This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access…
PriorityP426medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.15%
4.6th percentile
This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 27.2 | 27.2 |
| apple | macos | < 27.2 | 27.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS/iPadOS/macOS up to 27.1 information disclosure
vuldb·2026-10-26
CVE-2026-112658 [LOW] Apple iOS/iPadOS/macOS up to 27.1 information disclosure
A vulnerability classified as problematic was found in Apple iOS, iPadOS and macOS up to 27.1. This issue affects some unknown processing. Executing a manipulation can lead to information disclosure.
This vulnerability appears as CVE-2026-112658. The attack requires local access. There is no available exploit.
Upgrading the affected component is advised.
GHSA
This issue was addressed with improved input validation.
ghsa_unreviewed·2026-10-26
CVE-2026-112658 This issue was addressed with improved input validation.
This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data.
No detection rules found.
No public exploits indexed.
2026-10-26
Published