CVE-2026-65339

CVE Enrichment

CVSS: 5.0 MEDIUM
EPSS: 0.15%
EPSS Percentile: 4.28%
CISA KEV: Not listed

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 18-Aug-2026 05:17
Last Modified: 27-Oct-2026 04:18
EPSS Date: 2026-10-27
CWE: CWE-693

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:R /
                            S:U /
                            C:H /
                            I:N /
                            A:N

Affected Products / Versions

apple / ipados
Version / affected range: * · before (exclusive) 26.6.1
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple / iphone_os
Version / affected range: * · before (exclusive) 26.6.1
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple / macos
Version / affected range: * · from (inclusive) 26.0 · before (exclusive) 26.6.2
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

References

Last enrichment sync: 28-Oct-2026 04:40
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

iOS 18.7.11 and iPadOS 18.7.11 also address a logic issue in Audio (CVE-2026-65339) that could be exploited by an app to leak sensitive user information and an access vulnerability in CoreMedia (CVE-2026-86990) that Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

CVE (3)

MITRE ATT&CK (1)

Vendors (1)

Products (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.