An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/149230 | Vendor Advisory |
| https://support.apple.com/en-us/149521 | Vendor Advisory |
| https://support.apple.com/en-us/149524 | Vendor Advisory |
| https://support.apple.com/en-us/149525 | Vendor Advisory |
| https://support.apple.com/en-us/149526 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
05 Nov 2026, 14:54
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple
Apple watchos Apple ipados Apple iphone Os Apple visionos Apple tvos Apple macos |
|
| CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
|
| References | () https://support.apple.com/en-us/149230 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149521 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149524 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149525 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149526 - Vendor Advisory |
04 Nov 2026, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
| CWE | CWE-347 |
26 Oct 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-26 21:17
Updated : 2026-11-05 14:54
NVD link : CVE-2026-112518
Mitre link : CVE-2026-112518
CVE.ORG link : CVE-2026-112518
JSON object : View
Products Affected
apple
- macos
- iphone_os
- watchos
- ipados
- tvos
- visionos
CWE
CWE-347
Improper Verification of Cryptographic Signature