{"id":"CVE-2026-112612","state":"PUBLISHED","title":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a t","description":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.","publishedAt":"2026-10-26T20:37:28.196Z","updatedAt":"2026-10-26T20:37:28.196Z","severity":null,"assigner":"apple","products":["Apple iOS and iPadOS"],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"26.7.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/149227","https://support.apple.com/en-us/149230"],"weaknesses":[],"ingestedAt":"2026-10-29T20:10:43.281Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/112xxx/CVE-2026-112612.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-112612","state":"PUBLISHED","datePublished":"2026-10-26T20:37:28.196Z","dateUpdated":"2026-10-26T20:37:28.196Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2026-10-19T17:05:24.036Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files."}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"26.7.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/149227"},{"url":"https://support.apple.com/en-us/149230"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An attacker with physical access to a trust-paired device may be able to read and write arbitrary files"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-10-26T20:37:28.196Z"}}}}}