Medium severity4.3NVD Advisory· Published Sep 14, 2026· Updated Sep 14, 2026

CVE-2026-65352

Description

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on.

Affected products

Apple Inc./iOSllm-fuzzy
Range: before 26.6.1
Apple Inc./Ipadosllm-fuzzy
Range: before 26.6.1
Apple Inc./macOS Tahoellm-fuzzy
Range: before 26.6.2
Apple Inc./Visionosllm-fuzzy
Range: before 26.6.1

Patches

Vulnerability mechanics

References

support.apple.com/en-us/148281nvd
support.apple.com/en-us/148282nvd
support.apple.com/en-us/148353nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000