CVE-2026-113963
5.5CVSS base score · medium (NVD)
0.1%Chance of exploitation in the next 30 days (FIRST EPSS)
Not in KEVNo confirmed exploitation in CISA's catalog yet
What is it?
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2.1 and iPadOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data.
Official description from NVD.
What happened
Apple released updates fixing nine vulnerabilities across iOS 26, 27, iPadOS, macOS, watchOS, and visionOS. CVE-2026-113960 and CVE-2026-113961 enable message access in iMessage group chats. CVE-2026-113963 allows app access to sensitive user data. CVE-2026-113964 bypasses Bluetooth pairing code rate limits. Apply updates to patch privacy and authentication flaws.
From the Intel60 brief of Nov 10, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- HighApple patches nine vulnerabilities across iOS, macOS, watchOSNov 10, 2026