An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Apple |
|
No data.
No data.
References
History
Mon, 03 Aug 2026 17:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authorization flaw exposing sensitive user data on Apple OS versions prior to 26.6 |
Sun, 02 Aug 2026 11:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authorization Bypass Lets Apps Access Sensitive User Data via Improper State Management | |
| Weaknesses | CWE-284 |
Tue, 28 Jul 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-285 | |
| Metrics |
cvssV3_1
|
Tue, 28 Jul 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authorization Bypass Lets Apps Access Sensitive User Data via Improper State Management | |
| Weaknesses | CWE-284 |
Tue, 28 Jul 2026 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple ios And Ipados Apple macos Apple tvos Apple visionos Apple watchos |
|
| Vendors & Products |
Apple
Apple ios And Ipados Apple macos Apple tvos Apple visionos Apple watchos |
Mon, 27 Jul 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: apple
Published: 2026-07-27T20:12:14.717Z
Updated: 2026-07-28T16:30:48.141Z
Reserved: 2026-07-20T18:10:18.985Z
Link: CVE-2026-64743
Vulnrichment
Updated: 2026-07-28T16:25:13.125Z
NVD
No data.
Redhat
No data.