Apple has identified a logic flaw in the state management for pairing attempts that allows an attacker within Bluetooth range to bypass the rate limit on pairing code attempts. This flaw could let a malicious actor rapidly brute‑force pairing codes, potentially leading to unauthorized device pairing and subsequent access to personal data or services on the affected device. The vulnerability is strictly limited to the pairing process and does not directly provide a pathway to arbitrary code execution, but the impact on confidentiality, integrity, and availability can be significant if the attacker succeeds.

Apple iOS, iPadOS, macOS, visionOS, and watchOS devices running any firmware version earlier than iOS 18.7.12, iPadOS 18.7.12, iOS 26.7.3, iPadOS 26.7.3, iOS 27.2.1, iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, or watchOS 27.2.1.

The attack vector is Bluetooth; an attacker must be within range to attempt reconnection attempts and overwhelm the rate limiter. No EPSS data or KEV listing is available, and a CVSS score has not been published, so the precise exploitation likelihood and severity cannot be quantified from the information supplied. Nonetheless, the flaw allows attackers to rapidly try many pairing codes, which is a low‑barrier attack that could compromise user privacy if successful.