{"id":"CVE-2026-112706","state":"PUBLISHED","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.","publishedAt":"2026-10-26T20:35:30.955Z","updatedAt":"2026-10-29T13:27:20.295Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple iOS and iPadOS","Apple tvOS","Apple visionOS","Apple watchOS"],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"26.7.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/149227","https://support.apple.com/en-us/149230","https://support.apple.com/en-us/149524","https://support.apple.com/en-us/149525","https://support.apple.com/en-us/149526"],"weaknesses":["CWE-862"],"ingestedAt":"2026-10-29T20:10:43.281Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/112xxx/CVE-2026-112706.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-112706","state":"PUBLISHED","datePublished":"2026-10-26T20:35:30.955Z","dateUpdated":"2026-10-29T13:27:20.295Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2026-10-19T17:05:24.042Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data."}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"26.7.2","versionType":"custom"},{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/149227"},{"url":"https://support.apple.com/en-us/149230"},{"url":"https://support.apple.com/en-us/149524"},{"url":"https://support.apple.com/en-us/149525"},{"url":"https://support.apple.com/en-us/149526"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to access sensitive user data"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-10-26T20:35:30.955Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-112706","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-29T13:18:59.454818Z"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-862","lang":"en","type":"CWE","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-29T13:27:20.295Z"}}]}}}