CVE-2026-86959: Input Validation

Q: What must an attacker do to trigger this issue?

An attacker would need to cause the affected device to process a maliciously crafted image. The reported impact is unexpected termination of the process handling that image.

Q: Which software releases contain the fix?

The issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

Published Oct 20, 2026

Updated

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.

Affected Software

5 affected components

Apple iOS<26.7, <27

Apple iPadOS<26.7, <27

Apple macOS Golden Gate<27

Apple macOS Sequoia<15.8

Apple macOS Tahoe<26.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade iOS and iPadOS to a version that resolves this vulnerability.
Fixed in 26.7
Upgrade
Upgrade iOS and iPadOS to a version that resolves this vulnerability.
Fixed in 27
Upgrade
Upgrade macOS Golden Gate to a version that resolves this vulnerability.
Fixed in 27
Upgrade
Upgrade macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.8
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.7

Event History

Oct 20, 2026

CVE Published

via MITRE·12:50 AM

Data Sourced

via MITRE·12:50 AM

DescriptionWeakness

Data Sourced

via NVD·01:17 AM

Description

Frequently Asked Questions

What must an attacker do to trigger this issue?

An attacker would need to cause the affected device to process a maliciously crafted image. The reported impact is unexpected termination of the process handling that image.

Which software releases contain the fix?