CVE-2026-84490
Quick assessment
Affected
Apple iOS and iPadOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
此问题已通过改进状态管理机制得到修复。该问题已在 iOS 27 和 iPadOS 27 中修复。当 iPhone 镜像功能处于激活状态时，拥有设备物理访问权限的攻击者可能能够绕过数字身份（Digital ID）认证。
Possible ATT&CK Techniques 1 AI
T1110 · Brute Force
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-84490
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass Digital ID authentication when iPhone Mirroring is active.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apple | iOS and iPadOS | 0 ~ 27 | - |
|
II. Public POCs for CVE-2026-84490
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-84490
请登录查看更多情报信息。
Same Patch Batch · Apple · 2026-10-20 · 46 CVEs total
| CVE-2026-86868 | macOS 多版本认证绕过漏洞 | |
| CVE-2026-84579 | macOS 多版本网络文件引用逻辑漏洞 | |
| CVE-2026-84508 | iOS 27 等系统越狱数据访问漏洞 | |
| CVE-2026-65372 | macOS 27/15.8/26.7 竞态条件致隐私偏好绕过 | |
| CVE-2026-65356 | macOS Sequoia等版本存在可访问敏感数据的访问控制漏洞 | |
| CVE-2026-28853 | macOS Sequoia/Tahoe 权限提升漏洞 | |
| CVE-2026-28854 | macOS Golden Gate 27 应用完整性校验漏洞 | |
| CVE-2026-28850 | visionOS 27 授权问题致敏感数据泄露 | |
| CVE-2026-65379 | macOS 多版本安全输入状态处理漏洞 | |
| CVE-2026-84613 | iOS 26.7 等多系统越界写入漏洞 | |
| CVE-2026-84582 | iOS 27 等系统隐私漏洞：应用可访问敏感数据 | |
| CVE-2026-86871 | macOS 多版本网络文件服务器整数下溢漏洞 | |
| CVE-2026-86872 | Safari 27 等版本恶意网页内容逻辑漏洞 | |
| CVE-2026-86874 | Xcode 27 二进制解析越界读取漏洞 | |
| CVE-2026-86875 | Xcode 27 输入验证漏洞致应用意外终止 | |
| CVE-2026-86907 | macOS 15.8/26.7 系统密钥链越权漏洞 | |
| CVE-2026-86914 | macOS 多版本信息泄露漏洞 | |
| CVE-2026-86913 | iOS 等系统媒体文件处理Use After Free漏洞 | |
| CVE-2026-86918 | iOS 27 等系统越界写漏洞 | |
| CVE-2026-86915 | macOS Golden Gate 27 竞态条件导致系统终止 |
Showing top 20 of 46 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-84490
No comments yet