VDB
CVE-2026-65353
CVE-2026-65353
PUBLISHED
CVSS 5.5 MEDIUM
Reported by apple · Published September 14, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | 0 |
| Apple | macOS | 0 |
| Apple | iOS and iPadOS | 0, 0 |
| Apple | macOS | 0, 0 |
Timeline
- Sep 14, 2026 CVE Published
- Sep 15, 2026 EPSS Score
- Sep 15, 2026 Coalition ESS Score
- Sep 15, 2026 CVE Updated
- Sep 16, 2026 EPSS Score
- Sep 24, 2026 EPSS Score