Apple October 2026 updates patch 304 flaws, including prior exploit
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
76
Vulnerability1 · 1 read
CVE-2026-112432
Sensitive data access via logs in Apple OS before 27.2
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A logging flaw in several Apple operating systems can let an app read sensitive user data that was not properly redacted. A local app triggers it; no remote or unauthenticated path is described. Devices still running releases before the 27.2 updates are affected.
What to do: Update iOS, iPadOS, macOS Golden Gate, tvOS, visionOS, and watchOS to 27.2.
| Product | Affected | Fixed in |
|---|---|---|
| Apple iOS | — | 27.2 |
| Apple iPadOS | — | 27.2 |
| Apple macOS Golden Gate | — | 27.2 |
| Apple tvOS | — | 27.2 |
| Apple visionOS | — | 27.2 |
| Apple watchOS | — | 27.2 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.