Out-of-Bounds Write Vulnerability in Multiple Apple Products
CVE-2026-86876

5.2MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 14 September 2026

What is CVE-2026-86876?

An out-of-bounds write vulnerability has been identified in several Apple products, potentially allowing a sandboxed process to bypass sandbox restrictions. This issue was mitigated with enhanced bounds checking measures. Users of iOS, iPadOS, macOS, visionOS, and watchOS are urged to update their systems to the latest versions to ensure protection against potential exploitation.

Affected Version(s)

iOS and iPadOS 0 < 26.7

iOS and iPadOS 0 < 27

macOS 0 < 15.8

References

https://support.apple.com/en-us/149034

https://support.apple.com/en-us/149035

https://support.apple.com/en-us/149037

CVSS V3.1

Score:

5.2

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 14, 2026
Vulnerability Reserved
Sep 8, 2026

CVE-2026-86876 Data

JSON