CVE-2026-64732

nvd.nist.gov • July 30, 2026

This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting Apple Operating Systems Addressed on July 30, 2026 On July 30, 2026, two critical vulnerabilities were disclosed affecting various Apple operating systems, including iOS 26.6 and iPadOS 26.6. CVE-2026-64732 allows attackers with physical access to potentially access sensitive user data during iPhone Mirroring. CVE-2026-64733, published on July 27, 2026, addresses improved data protection but may allow apps to fingerprint users. Both vulnerabilities have been patched in the latest updates. Users are advised to update their devices to mitigate these risks. The vulnerabilities highlight ongoing concerns regarding data security and user privacy in mobile operating systems. 3 sources 58

Extracted Entities

CVE-2026-64732

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (2)