ThreatCluster

Apple Releases Security Updates for Apple TV and watchOS to Address Vulnerabilities

First seen 27 Oct 2026, 16:49 UTC •31

Article Content

1 / 3

Browse articles

ThreatCluster •October 27, 2026 at 18:17 UTC

•Apple released updates for Apple TV and watchOS on October 26, 2026.
•Vulnerabilities include CVE-2026-113898, CVE-2026-112446, and CVE-2026-112692.
•Users should update their devices to mitigate risks associated with these vulnerabilities.

On October 26, 2026, Apple released security updates for Apple TV 4K (2nd generation and later) and watchOS 27.2, addressing several vulnerabilities. The updates include fixes for CVE-2026-113898, which allows a malicious application to bypass privacy preferences, and CVE-2026-112446 and CVE-2026-112692, which enable access to sensitive user data. These vulnerabilities could lead to unexpected app terminations or data exposure. The issues were mitigated through improved data redaction and additional entitlement checks. Users are encouraged to update their devices to the latest software to protect against these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-26

Apple releases security updates

Apple addressed multiple vulnerabilities in Apple TV 4K and watchOS, including issues allowing sensitive data access.

2026-10-26

CVE-2026-113898 published

This CVE addresses a logging issue that may allow bypassing privacy preferences.

2026-10-26

CVE-2026-112446 published

This CVE involves additional entitlement checks to prevent unauthorized access to sensitive user data.

2026-10-26

CVE-2026-112432 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-10-26

CVE-2026-112454 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-10-26

CVE-2026-112455 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-10-26

CVE-2026-112459 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-10-26

CVE-2026-112466 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-10-26

CVE-2026-112470 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-10-26

CVE-2026-112476 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

More articles in this cluster (2)

Following this threat?

Track CVE-2022-26704 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Which devices are affected by these vulnerabilities?

The vulnerabilities affect Apple TV 4K (2nd generation and later) and Apple Watch Series 9 and later.

What should users do to protect their devices?

Users should update their devices to the latest software version released on October 26, 2026.

Are these vulnerabilities currently being exploited?

No, there is no indication of active exploitation reported for these vulnerabilities.

Continue Reading

Microsoft Issues Emergency Patches for Critical Brotli Vulnerability in .NET On October 27, 2026, Microsoft released emergency out-of-band security updates for .NET 8, 9, 10, and 11 RC3 to address CVE-2026-111497, a critical out-of-bounds write vulnerability in the Brotli decompression library. This flaw allows unauthenticated remote attackers to execute arbitrary code by sending crafted…

PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…