CVE-2026-65339: An app may be able to leak sensitive user information in Apple iOS and iPadOS
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.
AI Analysis
Technical Summary
CVE-2026-65339 describes a logic flaw in Apple iOS and iPadOS that may enable an app to leak sensitive user information. The vulnerability was mitigated by implementing improved checks in the affected operating systems. Fixed versions include iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27. The CVSS v3.1 base score is 5.0, indicating a medium severity issue with local attack vector, low complexity, requiring low privileges and user interaction, impacting confidentiality but not integrity or availability.
Potential Impact
An app running on affected versions of Apple operating systems may be able to leak sensitive user information, impacting confidentiality. There is no indication of impact on integrity or availability. Exploitation requires local access with low privileges and user interaction. No known exploits in the wild have been reported.
Mitigation Recommendations
This issue is fixed in iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27. Users and administrators should update to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.
CVE-2026-65339: An app may be able to leak sensitive user information in Apple iOS and iPadOS
Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.
CVSS v3.1
Score 5.0medium
Affected software
Apple
iOS and iPadOS
Apple
macOS
Apple
tvOS
Apple
visionOS
Apple
watchOS
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-65339 describes a logic flaw in Apple iOS and iPadOS that may enable an app to leak sensitive user information. The vulnerability was mitigated by implementing improved checks in the affected operating systems. Fixed versions include iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27. The CVSS v3.1 base score is 5.0, indicating a medium severity issue with local attack vector, low complexity, requiring low privileges and user interaction, impacting confidentiality but not integrity or availability.
Potential Impact
An app running on affected versions of Apple operating systems may be able to leak sensitive user information, impacting confidentiality. There is no indication of impact on integrity or availability. Exploitation requires local access with low privileges and user interaction. No known exploits in the wild have been reported.
Mitigation Recommendations
This issue is fixed in iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27. Users and administrators should update to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2026-07-22T00:45:26.179Z
- State
- PUBLISHED
Threat ID: 6a838036bf8831d5399e5e82
Added to database: 08/17/2026, 21:42:14 UTC
Last enriched: 09/19/2026, 00:52:40 UTC
Last updated: 10/01/2026, 14:52:58 UTC
Views: 51
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.