עברית

Vulnerability Intelligence

CVE-2026-113908

Medium 5.5

Published
Last modified
NVD status
Analyzed

Description

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.

Affected products

apple: ipados; apple: iphone os

References1

Metrics

CVSS 3.1
5.5 MEDIUM Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS — exploit probability
0% percentile: 3 · as of 8 November 2026
CWE
CWE-200

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.