CVE-2026-84490: Low severity Apple iOS vulnerability

Q: Who is exposed to this issue?

People using an affected iPhone or iPad with Digital ID authentication and iPhone Mirroring active are exposed if an attacker can obtain physical access to the locked device.

Q: What does an attacker need to exploit it?

The attacker needs physical access to a locked device while iPhone Mirroring is active. No prior privileges or user interaction are indicated in the provided CVSS vector.

Q: Are devices running iOS 27 or iPadOS 27 affected?

No. The issue is fixed in iOS 27 and iPadOS 27.

Published Oct 20, 2026

Updated

This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass Digital ID authentication when iPhone Mirroring is active.

Affected Software

2 affected components

Apple iOS<27

Apple iPadOS<27

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade iOS to a version that resolves this vulnerability.
Fixed in iOS 27
Upgrade
Upgrade iPadOS to a version that resolves this vulnerability.
Fixed in iPadOS 27

Event History

Oct 20, 2026

CVE Published

via MITRE·12:50 AM

Data Sourced

via MITRE·12:50 AM

DescriptionWeakness

Data Sourced

via NVD·01:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

People using an affected iPhone or iPad with Digital ID authentication and iPhone Mirroring active are exposed if an attacker can obtain physical access to the locked device.

What does an attacker need to exploit it?

The attacker needs physical access to a locked device while iPhone Mirroring is active. No prior privileges or user interaction are indicated in the provided CVSS vector.

Are devices running iOS 27 or iPadOS 27 affected?

No. The issue is fixed in iOS 27 and iPadOS 27.

CVE-2026-84490: Low severity Apple iOS vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Are devices running iOS 27 or iPadOS 27 affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Are devices running iOS 27 or iPadOS 27 affected?