Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
CVE-2026-86887: iOS, iPadOS, visionOS could let app ignore privacy settings
CVE-2026-86887 · published 1 month ago
Summary
Versions of iOS, iPadOS and visionOS prior to 26.7 may allow an application to work around a user's privacy choices, potentially exposing personal information. Apple removed the offending data in updates 26.7 and later (including version 27). Install the latest OS updates to ensure the privacy protection is in place.
What to do
- Update apple ios and ipados to version 26.7 or later.
- Update apple ipados to version 26.7 or later.
- Update apple iphone_os to version 26.7 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ios and ipados | < 26.7 |
| apple | visionos |
< 27 < 27.0 |
| apple | ipados |
< 26.7 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 26.7 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
Original advisory text
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences.
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
3.3
Low
Type
CWE-200Information Exposure
Timeline
Published14 Sep 2026
Updated26 Oct 2026
First seen14 Sep 2026
Track software like this
Free during beta