CVE-2026-64741

MEDIUM

Apple Ios And iPadOS - Denial of Service

Title source: rule
STIX 2.1

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier.

Scores

CVSS v3 5.5
EPSS 0.0013
EPSS Percentile 3.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (9)
Apple/iOS and iPadOS < 26.6
apple/ipados < 26.6
apple/iphone_os < 26.6
Apple/tvOS < 26.6
apple/tvos < 26.6
Apple/visionOS < 26.6
apple/visionos < 26.6
Apple/watchOS < 26.6
apple/watchos < 26.6
Published Jul 27, 2026
Tracked Since Jul 28, 2026