CVE-2026-112500

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-26 · updated 2026-10-27

Description

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's original email address may be leaked when using the Hide My Email feature.

Affected products

Apple iOS and iPadOS: before 27.2 — fixed in 27.2
Apple macOS: before 27.2 — fixed in 27.2
Apple visionOS: before 27.2 — fixed in 27.2

How to fix

Upgrade to a fixed version: Apple iOS and iPadOS 27.2; Apple macOS 27.2; Apple visionOS 27.2. Check the vendor advisory for mitigations.

References

https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149526

Get alerted when CVE-2026-112500 or the next vulnerability affects your stack