CVE-2026-113969
Summary
| CVE | CVE-2026-113969 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-11-09 22:18:26 UTC |
| Updated | 2026-11-10 21:51:05 UTC |
| Description | A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts. |
Risk And Classification
EPSS: 0.002150000 probability, percentile 0.118970000 (date 2026-11-10)
Problem Types: An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Apple | IOS And IPadOS | affected 18.7.12 custom | Not specified |
| CNA | Apple | IOS And IPadOS | affected 26.7.3 custom | Not specified |
| CNA | Apple | IOS And IPadOS | affected 27.2.1 custom | Not specified |
| CNA | Apple | MacOS | affected 15.8.3 custom | Not specified |
| CNA | Apple | MacOS | affected 26.7.3 custom | Not specified |
| CNA | Apple | MacOS | affected 27.2.1 custom | Not specified |
| CNA | Apple | VisionOS | affected 27.2.1 custom | Not specified |
| CNA | Apple | WatchOS | affected 26.6.1 custom | Not specified |
| CNA | Apple | WatchOS | affected 27.2.1 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| support.apple.com/en-us/149723 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149719 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149716 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149720 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149717 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149718 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149715 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149722 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149724 | [email protected] | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.