CVE-2026-64732

Published: Jul 27, 2026Modified: Aug 25, 2026

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.

Affected (2)

Products: Apple: Ipados, Iphone Os

2 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 26.6
Apple Iphone Os	Before 26.6

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (3)

https://support.apple.com/en-us/127116

Source: product-security@apple.com

https://support.apple.com/en-us/128066

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/148287

Source: product-security@apple.com

Timeline

No history available yet.