Out-of-Bounds Read Vulnerability in Apple Operating Systems
CVE-2026-86903

5.5MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 14 September 2026

What is CVE-2026-86903?

An out-of-bounds read vulnerability was identified in several Apple operating systems, which could potentially allow an app to access kernel memory. This issue has been mitigated by applying enhanced input validation measures in the latest system updates. Users are advised to upgrade to the most recent versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS to protect against any unauthorized memory access.

Affected Version(s)

iOS and iPadOS 0 < 27

macOS 0 < 27

tvOS 0 < 27

References

https://support.apple.com/en-us/149034

https://support.apple.com/en-us/149035

https://support.apple.com/en-us/149036

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 14, 2026
Vulnerability Reserved
Sep 8, 2026

CVE-2026-86903 Data

JSON