CVE-2026-113960
Summary
| CVE | CVE-2026-113960 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-11-09 22:18:25 UTC |
| Updated | 2026-11-10 21:51:05 UTC |
| Description | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to an iMessage group may be able to access messages sent before they joined. |
Risk And Classification
EPSS: 0.001810000 probability, percentile 0.077190000 (date 2026-11-10)
Problem Types: A user added to an iMessage group may be able to access messages sent before they joined
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Apple | IOS And IPadOS | affected 26.7.3 custom | Not specified |
| CNA | Apple | IOS And IPadOS | affected 27.2.1 custom | Not specified |
| CNA | Apple | MacOS | affected 15.8.3 custom | Not specified |
| CNA | Apple | MacOS | affected 26.7.3 custom | Not specified |
| CNA | Apple | MacOS | affected 27.2.1 custom | Not specified |
| CNA | Apple | VisionOS | affected 27.2.1 custom | Not specified |
| CNA | Apple | WatchOS | affected 27.2.1 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| support.apple.com/en-us/149719 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149716 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149720 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149718 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149715 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149722 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149724 | [email protected] | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.