CVE-2026-64742 in iOS

Summary

by MITRE • 07/28/2026

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: Apple
• Reservation: 07/20/2026
• Disclosure: 07/28/2026
• Moderation: accepted
• Entry: VDB-383737
• CPE: ready
• CWE: CWE-200 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Homeoffice, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-64742
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-64742
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-64742/