This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
History

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Title App May Access Sensitive User Data via Entitlement Check Bypass
First Time appeared Apple
Apple ios And Ipados
Apple tvos
Apple visionos
Apple watchos
Weaknesses CWE-284
Vendors & Products Apple
Apple ios And Ipados
Apple tvos
Apple visionos
Apple watchos

Mon, 26 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-10-26T20:40:17.783Z

Updated: 2026-10-26T20:40:17.783Z

Reserved: 2026-10-19T17:05:24.041Z

Link: CVE-2026-112692

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-26T21:18:03.830

Modified: 2026-10-27T14:53:24.677

Link: CVE-2026-112692

cve-icon Redhat

No data.