CVE-2026-86976: Apple iOS vulnerability
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iOS, iPadOS, and macOS Golden Gateto a version that resolves this vulnerability.Fixed in 27
Event History
Frequently Asked Questions
Which systems should be prioritized for updates?
Systems running Apple iOS, iPadOS, or macOS Golden Gate should be updated to version 27, where the issue is fixed.
What access would an attacker need to exploit this issue?
The available information indicates that an app may be able to access sensitive user data. It does not specify whether the app must already be installed, require user interaction, or need particular permissions.
Is there a documented workaround if updates cannot be deployed immediately?
No workaround or mitigation is provided in the available information. The documented remediation is updating to iOS 27, iPadOS 27, or macOS Golden Gate 27.