CVE-2026-64734

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-64734
The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted contact may leak sensitive data.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/128066 Release Notes Vendor Advisory
https://support.apple.com/en-us/128067 Release Notes Vendor Advisory
https://support.apple.com/en-us/128068 Release Notes Vendor Advisory
https://support.apple.com/en-us/128070 Release Notes Vendor Advisory
https://support.apple.com/en-us/128071 Release Notes Vendor Advisory
https://support.apple.com/en-us/128072 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
History

29 Jul 2026, 19:53

Type Values Removed Values Added
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
First Time Apple visionos
Apple macos
Apple
Apple watchos
Apple ipados
Apple iphone Os
References () https://support.apple.com/en-us/128066 - () https://support.apple.com/en-us/128066 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128067 - () https://support.apple.com/en-us/128067 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128068 - () https://support.apple.com/en-us/128068 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128070 - () https://support.apple.com/en-us/128070 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128071 - () https://support.apple.com/en-us/128071 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128072 - () https://support.apple.com/en-us/128072 - Release Notes, Vendor Advisory

28 Jul 2026, 17:17

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-200

27 Jul 2026, 21:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-07-27 21:17

Updated : 2026-07-29 19:53

NVD link : CVE-2026-64734

Mitre link : CVE-2026-64734

CVE.ORG link : CVE-2026-64734

JSON object : View

Products Affected

apple

  • ipados
  • watchos
  • visionos
  • macos
  • iphone_os
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor