CVE-2026-84603

MediumCVSS 5.5

Published: 14/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

A permissions issue in Apple systems was addressed with additional restrictions. An app may be able to access sensitive user data. The fix is available in iOS 27, iPadOS 27, visionOS 27, and watchOS 27.

Risk Assessment

An app may access sensitive user data, violating privacy and potentially leading to identity theft. This can compromise compliance with data protection regulations.

Recommendation

Update Apple devices to the latest OS versions listed in the advisory. Restrict app permissions to the minimum necessary.

Other vulnerabilities in Apple iOS, iPadOS, visionOS, watchOS

CVE-2026-112691Medium
An out-of-bounds write issue was addressed with improved input validation. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to cause unexpected system termination.

Original NVD description (English source)

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS