Apple patches Bluetooth and AirPlay pairing flaws across platforms
Ten fixes cover current and older Apple releases; advisories do not report exploitation of the Apple issues.
68
Vulnerability1 · 1 read
CVE-2026-113968
Bluetooth pairing rate-limit bypass on Apple devices
- CVSS 3.1
- 5.4 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A logic flaw in pairing-code state management lets an attacker in Bluetooth range bypass the rate limit on pairing attempts. No account and no user interaction are required. Success can weaken pairing protections and yield limited confidentiality and integrity impact. Affected products include iOS, iPadOS, macOS, visionOS, and watchOS builds that Apple says are fixed in the listed releases.
What to do: Install the Apple releases that fix this issue: iOS/iPadOS 18.7.12, 26.7.3, or 27.2.1; macOS Golden Gate 27.2.1, Sequoia 15.8.3, or Tahoe 26.7.3; visionOS 27.2.1; watchOS 26.6.1 or 27.2.1.
| Product | Affected | Fixed in |
|---|---|---|
| Apple iOS | — | 18.7.12, 26.7.3, 27.2.1 |
| Apple iPadOS | — | 18.7.12, 26.7.3, 27.2.1 |
| Apple macOS Golden Gate | — | 27.2.1 |
| Apple macOS Sequoia | — | 15.8.3 |
| Apple macOS Tahoe | — | 26.7.3 |
| Apple visionOS | — | 27.2.1 |
| Apple watchOS | — | 26.6.1, 27.2.1 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.
- Weakness
- CWE-307
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
In the news
4 storiesApple patches nine flaws across iOS, macOS, watchOS and visionOS
Updates cover iMessage group access, Bluetooth and AirPlay pairing-code bypasses, and one lock-screen AirPlay issue limited to iOS/iPadOS 26.
64
Apple patches nine iOS 27.2.1 and iPadOS 27.2.1 flaws, none exploited
Fixes include Bluetooth pairing-limit bypasses, AirPlay flaws, and iMessage group access; Apple reports no real-world use.
64
Apple iOS 27.2.1 fixes nine flaws in iMessage, Bluetooth, and AirPlay
The same release covers iPadOS 27.2.1; Apple does not say any of the nine flaws are exploited.
62