CVE-2026-65348

Published: Sep 14, 2026Modified: Sep 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system.

Affected (4)

Products: Apple: Ipados, Iphone Os, Macos

3 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	version < 26.7
Apple Iphone Os	version < 26.7
Apple Macos	15.0 ≤ version < 15.8
Apple Macos	26.0 ≤ version < 26.7

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (5)

https://support.apple.com/en-us/149034

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149035

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149041

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149042

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149043

Source: product-security@apple.com

Release NotesVendor Advisory

Timeline

No history available yet.