CVE-2026-112701
Quick assessment
Affected
Apple iOS and iPadOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
通过改进状态管理机制，修复了一个授权问题。该问题已在 iOS 26.7.2、iPadOS 26.7.2、iOS 27.2 和 iPadOS 27.2 中修复。此前，应用程序可能能够访问用户的敏感数据。
Possible ATT&CK Techniques 3 AI
T1003 · OS Credential Dumping T1565 · Data Manipulation T1040 · Network SniffingAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apple | iOS and iPadOS | < 26.7.2 |
affected |
< 27.2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112701
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apple | iOS and iPadOS | 0 ~ 26.7.2 | - |
|
II. Public POCs for CVE-2026-112701
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112701
请登录查看更多情报信息。
Same Patch Batch · Apple · 2026-10-26 · 324 CVEs total
| CVE-2026-86936 | macOS 多版本逻辑漏洞可提权至 root | |
| CVE-2026-112629 | iOS/macOS 越界读取漏洞修复 | |
| CVE-2026-112500 | iOS 27.2 等系统 Hide My Email 逻辑漏洞致邮箱泄露 | |
| CVE-2026-112691 | iOS 26.7.2 等越界写入漏洞 | |
| CVE-2026-112557 | macOS 多版本隐私偏好设置绕过漏洞 | |
| CVE-2026-112668 | macOS 多版本逻辑漏洞可提权至 root | |
| CVE-2026-112687 | iOS/iPadOS/tvOS 27.2 远程内存损坏漏洞 | |
| CVE-2026-112541 | macOS 15.8.2 等版本目录解析提权漏洞 | |
| CVE-2026-112453 | macOS 多版本沙箱逃逸漏洞 | |
| CVE-2026-112516 | iOS 等系统存在释放后使用漏洞 | |
| CVE-2026-84634 | iOS 27 等系统竞态条件漏洞可致系统终止 | |
| CVE-2026-112469 | iOS 26.7.2 等越界写漏洞修复 | |
| CVE-2026-112595 | iOS 27.2 等系统 Thread 网络认证绕过漏洞 | |
| CVE-2026-86920 | iOS/macOS/visionOS 授权绕过漏洞 | |
| CVE-2026-113940 | macOS Golden Gate 27.2 越界读取漏洞 | |
| CVE-2026-112652 | iOS/macOS 等逻辑漏洞致证书验证绕过 | |
| CVE-2026-113901 | Safari 27.2 等存在释放后使用漏洞 | |
| CVE-2026-112428 | macOS 逻辑漏洞：应用可绕过 Gatekeeper | |
| CVE-2026-65363 | iOS/macOS 越狱：应用可突破沙盒限制 | |
| CVE-2026-112432 | iOS 27.2 等系统日志敏感数据泄露 |
Showing top 20 of 324 CVEs. View all on vendor page → →