CVE-2026-64732

This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.
References
Link Resource
https://support.apple.com/en-us/128066 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

History

28 Jul 2026, 18:47

Type Values Removed Values Added
First Time Apple
Apple iphone Os
Apple ipados
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/128066 - () https://support.apple.com/en-us/128066 - Release Notes, Vendor Advisory

28 Jul 2026, 16:19

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.6
CWE CWE-284

27 Jul 2026, 21:17

Type Values Removed Values Added
New CVE

Information

Published : 2026-07-27 21:17

Updated : 2026-07-28 18:47


NVD link : CVE-2026-64732

Mitre link : CVE-2026-64732

CVE.ORG link : CVE-2026-64732


JSON object : View

Products Affected

apple

  • ipados
  • iphone_os
CWE
CWE-284

Improper Access Control