An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Apple |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://support.apple.com/en-us/149034 |
|
History
Fri, 30 Oct 2026 00:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authorization flaw enabling apps to make calls or send messages without user consent |
Thu, 29 Oct 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authorization Issue Allowing App to Initiate Calls or Send Messages on iOS and iPadOS | |
| Weaknesses | CWE-285 |
Thu, 29 Oct 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-863 | |
| Metrics |
cvssV3_1
|
Tue, 20 Oct 2026 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authorization Issue Allowing App to Initiate Calls or Send Messages on iOS and iPadOS | |
| Weaknesses | CWE-285 |
Tue, 20 Oct 2026 04:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple ios And Ipados |
|
| Vendors & Products |
Apple
Apple ios And Ipados |
Tue, 20 Oct 2026 01:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: apple
Published: 2026-10-20T00:50:57.440Z
Updated: 2026-10-29T17:29:14.555Z
Reserved: 2026-09-08T16:43:47.662Z
Link: CVE-2026-86977
Vulnrichment
Updated: 2026-10-29T17:28:51.505Z
NVD
Status : Undergoing Analysis
Published: 2026-10-20T01:17:29.353
Modified: 2026-10-29T18:17:35.963
Link: CVE-2026-86977
Redhat
No data.