---
id: CVE-2026-84606
title: A privacy issue was addressed with improved handling of identifiers
summary: >-
  A privacy issue was addressed with improved handling of identifiers. This
  issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An
  app may be able to identify a user across reinstalls.
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'
cwe:
  - CWE-287
  - CWE-330
  - CWE-359
vendor: apple
product: ipados
affected:
  - ipados < 27.0
  - iphone_os < 27.0
  - macos < 27.0
  - visionos < 27.0
patched:
  - ipados 27.0
  - iphone_os 27.0
  - macos 27.0
  - visionos 27.0
published: '2026-09-14'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T15:56:48.033'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-84606'
references:
  - url: 'https://support.apple.com/en-us/149034'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149035'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149038'
    label: product-security@apple.com
tags:
  - nvd
  - cve.org
epss: 0.00406
epssPercentile: 0.32268
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-15T18:18:57.292008Z'
ingestedAt: '2026-09-14T21:15:17.477Z'
---

## Overview

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls.

## Affected

- `ipados < 27.0`
- `iphone_os < 27.0`
- `macos < 27.0`
- `visionos < 27.0`

## Remediation

Upgrade past the affected range:

- `ipados 27.0`
- `iphone_os 27.0`
- `macos 27.0`
- `visionos 27.0`