Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

iOS and Other Apple Systems Allow Apps to Access User Data

CVE-2026-43800 · published 3 months ago
Summary

A security issue in Apple's iOS, iPadOS, macOS, tvOS, and watchOS allowed certain apps to access sensitive user information. This is a concern because it could lead to unauthorized access to personal data. Apple has fixed this issue in the latest version of each operating system, and users should update their devices as soon as possible.

What to do
  • Update apple macos to version 26.6 or later.
  • Update apple tvos to version 26.6 or later.
  • Update apple watchos to version 26.6 or later.
  • Update apple ipados to version 26.6 or later.
  • Update apple iphone_os to version 26.6 or later.
Affected software
VendorProductAffected versions
apple ios and ipados < 26.6
< 18.7.10
apple macos < 26.6
>= 26.0, < 26.6
apple tvos < 26.6
apple watchos < 26.6
apple ipados < 26.6
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple iphone_os < 26.6
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Original advisory text
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS ...
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published27 Jul 2026
Updated4 Nov 2026
First seen27 Jul 2026
Sources
CVE-2026-43800 · NVD
CVE-2026-43800 · MITRE
Track software like this
Free during beta