Out-of-Bounds Write Vulnerability in Apple Products
CVE-2026-86953

4.6MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 20 October 2026

What is CVE-2026-86953?

An out-of-bounds write issue exists within various Apple operating systems, potentially allowing attackers in close physical proximity to exploit this vulnerability. This exploitation can lead to a denial-of-service condition, affecting the overall system stability. Apple has addressed this issue with enhanced bounds checking in the latest versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, ensuring a more secure user experience.

Affected Version(s)

iOS and iPadOS 0 < 27

macOS 0 < 27

tvOS 0 < 27

References

https://support.apple.com/en-us/149034

https://support.apple.com/en-us/149035

https://support.apple.com/en-us/149036

CVSS V3.1

Score:

4.6

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Physical

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 20, 2026
Vulnerability Reserved
Sep 8, 2026

CVE-2026-86953 Data

JSON