Apple iOS 27.2 fixes 163 flaws, including critical WebKit RCE
The release addresses memory corruption, sandbox escape, kernel writes, and unauthorized access to sensitive user data across many components.
74
Vulnerability1 · 1 read
CVE-2026-112692
Sensitive data access via missing entitlement checks in Apple OS apps
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Apple fixed missing entitlement checks in iOS, iPadOS, tvOS, visionOS, and watchOS. A local app can reach sensitive user data. The issue is fixed in the 27.2 releases of those systems. Apple has not listed which earlier builds are affected.
What to do: Update iOS, iPadOS, tvOS, visionOS, and watchOS to 27.2, which adds the entitlement checks.
| Product | Affected | Fixed in |
|---|---|---|
| Apple iOS | — | 27.2 |
| Apple iPadOS | — | 27.2 |
| Apple tvOS | — | 27.2 |
| Apple visionOS | — | 27.2 |
| Apple watchOS | — | 27.2 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.