A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to delete files for which it does not have permission.
Problem type
- An app may be able to delete files for which it does not have permission
Affected products
Apple
< 26.6 - AFFECTED
< 14.8.8 - AFFECTED
< 15.7.8 - AFFECTED
< 26.6 - AFFECTED
< 26.6 - AFFECTED
References
https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/128071
https://support.apple.com/en-us/128072
GitHub Security Advisories
GHSA-cg9v-qvv4-rfp9
A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and...
https://github.com/advisories/GHSA-cg9v-qvv4-rfp9A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to delete files for which it does not have permission.
https://nvd.nist.gov/vuln/detail/CVE-2026-64707
https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/128071
https://support.apple.com/en-us/128072
https://github.com/advisories/GHSA-cg9v-qvv4-rfp9
JSON source
https://cveawg.mitre.org/api/cve/CVE-2026-64707Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64707",
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"dateUpdated": "2026-07-27T20:14:16.526Z",
"dateReserved": "2026-07-20T18:09:24.049Z",
"datePublished": "2026-07-27T20:14:16.526Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple",
"dateUpdated": "2026-07-27T20:14:16.526Z"
},
"descriptions": [
{
"lang": "en",
"value": "A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to delete files for which it does not have permission."
}
],
"affected": [
{
"vendor": "Apple",
"product": "iOS and iPadOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "14.8.8"
},
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "15.7.8"
},
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
},
{
"vendor": "Apple",
"product": "visionOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "An app may be able to delete files for which it does not have permission"
}
]
}
],
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
}
}