CVE-2026-113960: Input Validation

Q: Who could access message content because of this issue?

A user who is added to an iMessage group may be able to access messages sent before they joined the group.

Q: Which releases contain the fix?

The issue is fixed in iOS and iPadOS 26.7.3 and 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, and watchOS 27.2.1.

Q: What should teams do if they use iMessage groups containing sensitive historical messages?

Apply the listed fixed operating-system releases. Review group membership practices where access to messages sent before a member joins would be sensitive.

Published Nov 9, 2026

Updated

AirPlay. A logic issue was addressed with improved state management.

Other sources

App Intents. An authorization issue was addressed with improved state management.

— Apple

Bluetooth. A use-after-free issue was addressed with improved memory management.

— Apple

brotli. An out-of-bounds write issue was addressed with improved input validation.

— Apple

CoreUtils. A logic issue was addressed with improved state management.

— Apple

CoreUtils. This issue was addressed with improved checks.

— Apple

Credit

Apple, an anonymous researcher, CVE-2026-111497, László Várady

Affected Software

3 affected componentsFixes available

Apple iOS<27.2.1

27.2.1

Apple iPadOS<27.2.1

27.2.1

Apple macOS Golden Gate<27.2.1

27.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 27.2.1
Upgrade
Upgrade iOS to a version that resolves this vulnerability.
Fixed in 26.7.3
Upgrade
Upgrade iPadOS to a version that resolves this vulnerability.
Fixed in 26.7.3
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.7.3
Upgrade
Upgrade iOS to a version that resolves this vulnerability.
Fixed in 27.2.1
Upgrade
Upgrade iPadOS to a version that resolves this vulnerability.
Fixed in 27.2.1
Upgrade
Upgrade macOS Golden Gate to a version that resolves this vulnerability.
Fixed in 27.2.1
Upgrade
Upgrade macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.8.3
Upgrade
Upgrade visionOS to a version that resolves this vulnerability.
Fixed in 27.2.1
Upgrade
Upgrade watchOS to a version that resolves this vulnerability.
Fixed in 27.2.1

Event History

Nov 9, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·08:27 PM

Data Sourced

via MITRE·08:27 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

Who could access message content because of this issue?

A user who is added to an iMessage group may be able to access messages sent before they joined the group.

Which releases contain the fix?

The issue is fixed in iOS and iPadOS 26.7.3 and 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, and watchOS 27.2.1.

What should teams do if they use iMessage groups containing sensitive historical messages?

Apply the listed fixed operating-system releases. Review group membership practices where access to messages sent before a member joins would be sensitive.

CVE-2026-113960: Input Validation

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

Who could access message content because of this issue?

Which releases contain the fix?

What should teams do if they use iMessage groups containing sensitive historical messages?

Company

Resources

Contact

Frequently Asked Questions

Who could access message content because of this issue?

Which releases contain the fix?

What should teams do if they use iMessage groups containing sensitive historical messages?