Medium severity4.3NVD Advisory· Published Sep 14, 2026· Updated Sep 14, 2026

CVE-2026-65355

Description

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on.

Affected products

Apple Inc./iOSllm-fuzzy
Range: 18.7.10
Apple Inc./Ipadosllm-fuzzy
Range: 18.7.10
Apple Inc./macOS Tahoellm-fuzzy
Range: 26.6.2

Patches

Vulnerability mechanics

References

support.apple.com/en-us/148281nvd
support.apple.com/en-us/148282nvd
support.apple.com/en-us/148287nvd
support.apple.com/en-us/148353nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000