Apple iOS
Moderate fix1 remedy
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*
Moderate fix1 remedy
Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Apple iOS, iPadOS, and macOS CoreFoundation Environment Variable Handling Vulnerability Allowing Information Disclosure
Vulnerability
Exploited
Patched
A vulnerability exists in the CoreFoundation component of Apple iOS 13.6, iPadOS 13.6, and macOS Catalina 10.15.6. The issue arises from improper handling of environment variables, which could allow a local user to access sensitive information. This vulnerability has been addressed with improved validation of environment variables.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive user information.
Remediation
Users can update to iOS 13.6, iPadOS 13.6, or macOS Catalina 10.15.6 to address this vulnerability.
Added: May 15, 2026, 10:55 AM
Updated: May 15, 2026, 10:55 AM
Vulnerability Rating
Custom Algorithm
spread
8.4impact
2.5exploitability
5.0remediation
7.7relevance
0.0threat
8.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.