CVE-2026-113963: Apple iOS vulnerability

Published Nov 9, 2026

Updated

AirPlay. A logic issue was addressed with improved state management.

Other sources

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2.1 and iPadOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data.

— MITRE

App Intents. An authorization issue was addressed with improved state management.

— Apple

Credit

Apple, László Várady, CVE-2026-111497, an anonymous researcher

Affected Software

2 affected componentsFixes available

Apple iOS<27.2.1

27.2.1

Apple iPadOS<27.2.1

27.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 27.2.1
Upgrade
Upgrade iOS, iPadOS, visionOS, and watchOS to a version that resolves this vulnerability.
Fixed in 27.2.1

Event History

Nov 9, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·08:27 PM

Data Sourced

via MITRE·08:27 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

APPLE-149715

Peer vulnerabilities

Found alongside the following vulnerabilities.