CVE-2026-65352

No fix known EPSS <1%CVSS 4.3

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on.

Published 2026-09-14 · CVE record · OSV

Products: Apple iOS and iPadOS, Apple macOS, Apple visionOS