CVE-2026-86904

7.5 Élevée

Publiée le 14/09/2026 à 23:17 · Modifiée le 16/09/2026 à 03:02 · Analysée par le NVD · Source : product-security@apple.com

Description

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission.

Traduire en français

Produits concernés

Apple iOS and iPadOS
Apple watchOS
Apple ipados
Apple iphone os

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-359

Références

https://support.apple.com/en-us/149034 Release NotesVendor Advisory
https://support.apple.com/en-us/149037 Release NotesVendor Advisory
https://support.apple.com/en-us/149041 Release NotesVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories