Skip to content
NewA calmer, faster ZeroHour
Vulnerability3

CVE-2026-86990

Camera access without permission on Apple devices

CVSS
—
EPSS
—
Published
·
Modified
Analyze CVE-2026-86990 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

Apple fixed an access-control flaw that lets a malicious app use the camera without the user's permission. The app must already be on the device; no separate user approval is required for the camera access. An attacker gains unauthorized camera access. iOS, iPadOS, macOS Golden Gate, macOS Tahoe, and visionOS are affected until the listed updates.

What to do: Install iOS and iPadOS 18.7.11, 26.7.2, or 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, or visionOS 27.2.

ProductAffectedFixed in
Apple iOS—18.7.11, 26.7.2, and 27.2
Apple iPadOS—18.7.11, 26.7.2, and 27.2
Apple macOS Golden Gate—27.2
Apple macOS Tahoe—26.7.2
Apple visionOS—27.2
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A malicious app may be able to access the camera without user permission.

NVD CVE.org GitHub PoCs EPSS (—)

In the news

4 stories