CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability

Q: Which product families should be included in remediation planning?

The affected software list includes Apple iOS, Apple iPadOS, macOS Sequoia, and macOS Tahoe.

Published Sep 28, 2026

Updated

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

Other sources

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

— NVD

Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

— CISA

Audio. A logic issue was addressed with improved checks.

— Apple

CoreGraphics. An out-of-bounds write issue was addressed with improved bounds checking.

— Apple

Credit

Meta Product Security, Mustafa Calap@@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin

Affected Software

15 affected componentsFixes available

Apple iOS<26.7.1

26.7.1

Apple iPadOS<26.7.1

26.7.1

Apple macOS Sequoia<15.8.1

15.8.1

Apple macOS Tahoe<26.7.1

26.7.1

Apple iPadOS<26.7.1

Apple iPhone OS<26.7.1

Apple macOS<15.8.1

Apple macOS>=26.0<26.7.1

Apple Multiple Products

Apple iOS<18.7.11

18.7.11

Apple iPadOS<18.7.11

18.7.11

Apple iPadOS<18.7.11

Apple iPadOS>=26.0<26.7.1

Apple iPhone OS<18.7.11

Apple iPhone OS>=26.0<26.7.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.7.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.8.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 18.7.11
Upgrade
Upgrade Apple iOS/iPadOS to a version that resolves this vulnerability.
Fixed in 18.7.11
Upgrade
Upgrade Apple iOS/iPadOS to a version that resolves this vulnerability.
Fixed in 26.7.1
Upgrade
Upgrade Apple macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.8.1
Upgrade
Upgrade Apple macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.7.1

Event History

Sep 28, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·07:13 PM

Data Sourced

via MITRE·07:13 PM

DescriptionWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeaknessAffected Software

Sep 29, 2026

Data Sourced

via CISA·12:00 AM

RemedyDescriptionWeaknessAffected Software

Exploit Published

via GitHub·08:46 AM

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

Which product families should be included in remediation planning?

The affected software list includes Apple iOS, Apple iPadOS, macOS Sequoia, and macOS Tahoe.

CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

Which product families should be included in remediation planning?

Company

Resources

Contact