Overview
What is CVE-2026-113908?
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2.
An app may be able to access sensitive user data.
Source: NVD
CVE intelligence
CVE-2026-113908
Vulnerability intelligence
N/ACVSS not listedScore unavailable
What this means
Review the available evidence
CVE-2026-113908. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CISA KEVNot listedBased on the latest collected catalog
EPSSUnavailableNo current score collected
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships