CVE-2026-86957: Apple iOS vulnerability
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iOS/iPadOSto a version that resolves this vulnerability.Fixed in 26.7 - Upgrade
Upgrade
iOS/iPadOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
macOS Golden Gateto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
macOS Sequoiato a version that resolves this vulnerability.Fixed in 15.8 - Upgrade
Upgrade
macOS Tahoeto a version that resolves this vulnerability.Fixed in 26.7 - Upgrade
Upgrade
tvOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
visionOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
watchOSto a version that resolves this vulnerability.Fixed in 27
Event History
Frequently Asked Questions
What access does an attacker need to attempt exploitation?
The attacker must be in wireless proximity to the affected device. The available information does not specify any additional authentication, user-interaction, or network-access requirement.
What operational impact should responders expect from a successful attempt?
A successful attack may cause the affected system to terminate unexpectedly. The provided information does not describe data disclosure, privilege escalation, or persistent compromise.