CVE-2026-86953: Apple iOS vulnerability
Published Oct 20, 2026
·Updated
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.
Affected Software
6 affected components
Apple iOS<27
Apple iPadOS<27
Apple macOS Golden Gate<27
Apple tvOS<27
Apple visionOS<27
Apple WatchOS<27
Event History
Oct 20, 2026
CVE Published
via MITRE·12:50 AM
Data Sourced
via MITRE·12:50 AM
DescriptionWeakness
Data Sourced
via NVD·01:17 AM
Description
Frequently Asked Questions
1
Who is realistically exposed to this issue?
Devices running affected Apple operating systems are exposed when an attacker can get into physical proximity. The reported impact is denial of service.
2
What does an attacker need to exploit it?
The attacker must be in physical proximity to the target device. No further exploitation prerequisites are provided.
3
Which releases contain the fix?
The issue is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.