Out-of-Bounds Read Vulnerability in Apple iOS and macOS Products
CVE-2026-86957

6.5MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 20 October 2026

What is CVE-2026-86957?

This vulnerability involves an out-of-bounds read error that could allow an attacker within wireless proximity to exploit the issue, potentially leading to unexpected system terminations. Apple has addressed this problem with enhanced bounds checking in several updates for iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, specifically in version 26.7 and later releases.

Affected Version(s)

iOS and iPadOS 0 < 26.7

iOS and iPadOS 0 < 27

macOS 0 < 15.8

References

https://support.apple.com/en-us/149034

https://support.apple.com/en-us/149035

https://support.apple.com/en-us/149036

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 20, 2026
Vulnerability Reserved
Sep 8, 2026

CVE-2026-86957 Data

JSON