This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/128066 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/128068 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/128069 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/128070 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Jul 2026, 19:50
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
|
| References | () https://support.apple.com/en-us/128066 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/128068 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/128069 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/128070 - Release Notes, Vendor Advisory | |
| First Time |
Apple visionos
Apple Apple watchos Apple ipados Apple tvos Apple iphone Os |
28 Jul 2026, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-319 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
27 Jul 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-27 21:17
Updated : 2026-07-28 19:50
NVD link : CVE-2026-64742
Mitre link : CVE-2026-64742
CVE.ORG link : CVE-2026-64742
JSON object : View
Products Affected
apple
- ipados
- tvos
- watchos
- visionos
- iphone_os
CWE
CWE-319
Cleartext Transmission of Sensitive Information