CVE-2026-84594None▾ SunlitA logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
ios_and_ipados < 26.7.2ios_and_ipados < 27Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-84627NoneA buffer overflow was addressed with improved bounds checking
CVE-2026-64750NoneAn out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-86942NoneAn out-of-bounds read was addressed with improved bounds checking
CVE-2026-86954NoneAn out-of-bounds read was addressed with improved bounds checking
CVE-2026-86920NoneAn authorization issue was addressed with improved state management
CVE-2026-65363NoneThe issue was addressed with improved checks