CVE-2026-84598

7.5 Élevée

Publiée le 14/09/2026 à 23:17 · Modifiée le 16/09/2026 à 19:10 · Analysée par le NVD · Source : product-security@apple.com

Description

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.

Traduire en français

Produits concernés

Apple iOS and iPadOS
Apple ipados
Apple iphone os

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-22

Références

https://support.apple.com/en-us/149034 Vendor AdvisoryRelease Notes
https://support.apple.com/en-us/149041 Vendor AdvisoryRelease Notes

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories