ShellCodeX vulnerability brief
MEDIUM
Analyzed
CVE-2026-64742
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
Published 27 Jul 2026, 21:17 UTC
Last modified 28 Jul 2026, 19:50 UTC
01
Attack profile
The conditions required to exploit this vulnerability and its potential impact.
Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
02
Affected products
Product applicability statements supplied with the NVD record.
VendorProductAffected version
Apple
Ipados
before 26.6
Apple
Iphone Os
before 26.6
Apple
Tvos
before 26.6
Apple
Visionos
before 26.6
Apple
Watchos
before 26.6
03
Weakness classification
CWE categories help security teams group the underlying software weakness.
04
Source references
External advisories, patches and technical reports attached to this CVE record.
NVD
National Vulnerability Database recordnvd.nist.gov
↗
01
Release Notes · Vendor Advisory
product-security@apple.com
↗
02
Release Notes · Vendor Advisory
product-security@apple.com
↗
03
Release Notes · Vendor Advisory
product-security@apple.com
↗
04
Release Notes · Vendor Advisory
product-security@apple.com
↗