MEDIUM

CVE-2026-65404

Apple Ipados 2026-09-14 CVSS v3.1

CVSS

5.5

Description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences.

Weakness (CWE)

CWE-863 Incorrect Authorization

EPSS Score

0.14%

Probability of exploitation in next 30 days

4.1th percentile

References

https://support.apple.com/en-us/128071 Vendor Advisory https://support.apple.com/en-us/128072 Vendor Advisory https://support.apple.com/en-us/148287 Vendor Advisory https://support.apple.com/en-us/149034 Vendor Advisory https://support.apple.com/en-us/149035 Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE