CVE-2026-86961: Race Condition
Published Oct 20, 2026
·Updated
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.
Affected Software
3 affected components
Apple iOS<27
Apple iPadOS<27
Apple macOS Golden Gate<27
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
iPadOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
macOS Golden Gateto a version that resolves this vulnerability.Fixed in 27
Event History
Oct 20, 2026
CVE Published
via MITRE·12:50 AM
Data Sourced
via MITRE·12:50 AM
DescriptionWeakness
Data Sourced
via NVD·01:17 AM
Description
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker needs to get a malicious app running on the device. The reported impact is that the app may be able to escape its sandbox.
2
Which software releases contain the fix?
The issue is fixed in iOS 27, iPadOS 27, and macOS Golden Gate 27.