This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/128066 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Jul 2026, 18:47
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple
Apple iphone Os Apple ipados |
|
| CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
|
| References | () https://support.apple.com/en-us/128066 - Release Notes, Vendor Advisory |
28 Jul 2026, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.6 |
| CWE | CWE-284 |
27 Jul 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-27 21:17
Updated : 2026-07-28 18:47
NVD link : CVE-2026-64732
Mitre link : CVE-2026-64732
CVE.ORG link : CVE-2026-64732
JSON object : View
Products Affected
apple
- ipados
- iphone_os
CWE
CWE-284
Improper Access Control
