Medium severity6.1NVD Advisory· Published Sep 14, 2026· Updated Sep 16, 2026

CVE-2026-84560

Description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.

Affected products

Apple Inc./iOSllm-fuzzy
Range: = 27
Apple Inc./Ipadosllm-fuzzy2 versions
= 27+ 1 more
- (no CPE)range: = 27
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <27.0
Apple Inc./macOS Golden Gatellm-fuzzy
Range: = 27
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <27.0
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: <27.0
Apple Inc./tvOS
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Range: <27.0
Apple Inc./Visionos
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Range: <27.0
Apple Inc./watchOS
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Range: <27.0

Patches

Vulnerability mechanics

References

support.apple.com/en-us/149034nvdRelease NotesVendor Advisory
support.apple.com/en-us/149035nvdRelease NotesVendor Advisory
support.apple.com/en-us/149036nvdRelease NotesVendor Advisory
support.apple.com/en-us/149037nvdRelease NotesVendor Advisory
support.apple.com/en-us/149038nvdRelease NotesVendor Advisory

News mentions

Apple Updates Everything, (Mon, Sep 14th)
SANS Internet Storm Center · Sep 14, 2026

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000