Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms
Apple on Monday released security updates for iOS, iPadOS, macOS, watchOS and visionOS to patch 10 vulnerabilities, half of them related to Bluetooth and AirPlay pairing.
Five of the flaws are addressed in all nine releases: iOS and iPadOS 27.2.1, 26.7.3 and 18.7.12; macOS Golden Gate 27.2.1, Tahoe 26.7.3 and Sequoia 15.8.3; watchOS 27.2.1 and 26.6.1; and visionOS 27.2.1.
Three of the five involve the limit on pairing code guesses. CVE-2026-113968, an AirPlay bug, may be exploitable from Bluetooth range, while CVE-2026-113969, found in the rapportd component, requires the attacker to be on the same network and concerns AirPlay pairing codes.
The third, CVE-2026-113964 in CoreUtils, pairs the same kind of bypass with a second impact. “An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction,” Apple says.
Another CoreUtils issue, CVE-2026-113965, is described in...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
