This vulnerability (CVE-2026-64733) involves an app's ability to fingerprint users on Apple iOS and iPadOS platforms. Fingerprinting can enable tracking or profiling of users without their consent. Apple fixed the issue by enhancing data protection mechanisms in iOS 26.6 and iPadOS 26.6, as well as macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The CVSS 3.1 base score of 9.8 reflects network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An attacker-controlled app could fingerprint users, potentially leading to privacy violations and unauthorized tracking. The vulnerability affects confidentiality, integrity, and availability of user data on affected Apple devices. Given the critical CVSS score, exploitation could have severe consequences for user privacy and device security.

Apple has released fixes in iOS 26.6 and iPadOS 26.6 that address this vulnerability through improved data protection. Users and administrators should update affected devices to these versions or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the official OS updates. Patch status is confirmed by the vendor advisory stating the issue is fixed in these versions.