CVE-2026-84490

Status: Awaiting AnalysisLow (2)—

Severity2Low · CVSS 3.1

Exploitation probability0.19 %higher than 8% of CVEs

Active exploitationNonot in the CISA catalog

Public exploitNot knownno public code found

This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass Digital ID authentication when iPhone Mirroring is active.

CVSS

Base score: 2
Version: 3.1
Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.19 %
Percentile among all scored CVEs: 8
Score date: 10/20/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1091 Replication Through Removable Medialateral movement · initial access90 %
Primary impactT1078 Valid Accountsstealth · persistence · privilege escalation · initial access65 %

Vector AV:P (acceso físico) y descripción: un atacante con acceso físico a un dispositivo bloqueado puede eludir la autenticación de Digital ID con iPhone Mirroring activo (CWE-287).

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

ATT&CK mitigations that cover these techniques

Application Developer Guidance Active Directory Configuration User Training User Account Management Privileged Account Management Password Policies

Affected technologies (2)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Apple — Ipados^AI Apple — Iphone OS^AI

CWEs

CWE-287

References

Show 1 references

https://support.apple.com/en-us/149034

Raw JSON (NVD)

Show

{
  "id": "CVE-2026-84490",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-84490",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-10-20T14:51:40.493661Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 2,
          "attackVector": "PHYSICAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 0.5
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "Apple",
          "product": "iOS and iPadOS",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "27",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-10-20T01:17:20.553",
  "references": [
    {
      "url": "https://support.apple.com/en-us/149034",
      "source": "product-security@apple.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass Digital ID authentication when iPhone Mirroring is active."
    }
  ],
  "lastModified": "2026-10-20T15:17:31.200",
  "sourceIdentifier": "product-security@apple.com"
}