An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization.
Problem type
- An app may be able to add contacts without user authorization
Affected products
Apple
< 26.6 - AFFECTED
< 26.6 - AFFECTED
< 26.6 - AFFECTED
< 26.6 - AFFECTED
References
https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128070
GitHub Security Advisories
GHSA-4977-wv8w-jw7p
An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.6...
https://github.com/advisories/GHSA-4977-wv8w-jw7pAn authorization issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization.
https://nvd.nist.gov/vuln/detail/CVE-2026-64746
https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128070
https://github.com/advisories/GHSA-4977-wv8w-jw7p
JSON source
https://cveawg.mitre.org/api/cve/CVE-2026-64746Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64746",
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"dateUpdated": "2026-07-27T20:14:14.856Z",
"dateReserved": "2026-07-20T18:10:18.985Z",
"datePublished": "2026-07-27T20:14:14.856Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple",
"dateUpdated": "2026-07-27T20:14:14.856Z"
},
"descriptions": [
{
"lang": "en",
"value": "An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization."
}
],
"affected": [
{
"vendor": "Apple",
"product": "iOS and iPadOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
},
{
"vendor": "Apple",
"product": "visionOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
},
{
"vendor": "Apple",
"product": "watchOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "An app may be able to add contacts without user authorization"
}
]
}
],
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
}
}