CyberRota Analysis
AI-GeneratedAn authorization vulnerability allows apps to add contacts without user consent on affected Apple platforms, including iOS, iPadOS, macOS, visionOS, and watchOS. This critical flaw, rated 9.8 on the CVSS scale, poses a significant risk to user privacy and data integrity. Organizations and users utilizing these operating systems should prioritize updating to the latest versions to mitigate potential exploitation.
CVE
CVE-2026-64746
Severity
CRITICAL
CVSS
9.8
EPSS
0.55%
Original NVD Description
An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization.
Related CVEs
Other vulnerabilities affecting the same vendor(s)