Paper/Archive/CVE-2026-84625

CVE-2026-84625

Apple iOS and iPadOS — A permissions issue was addressed with additional sandbox restrictions.

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 40.7.407 × 208.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user.

Affected

ProductAffectedFixed inSource

iOS and iPadOS< 2727CNA

macOS< 2727CNA

visionOS< 2727CNA

watchOS< 2727CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.apple.com/en-us/149034 refsupport.apple.com/en-us/149035 refsupport.apple.com/en-us/149037 refsupport.apple.com/en-us/149038