Race Condition Vulnerability in Apple iOS, macOS, and iPadOS
CVE-2026-86961

7.8HIGH

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Vendor
CVE Published:
20 October 2026

What is CVE-2026-86961?

A race condition vulnerability was identified in Apple’s iOS, iPadOS, and macOS products, where improper validation could allow a malicious application to bypass its security sandbox. This flaw could enable unauthorized actions or access to system resources. The issue has been addressed in the latest versions of iOS 27, iPadOS 27, and macOS Golden Gate 27, with enhanced validation measures implemented to safeguard user data.

Affected Version(s)

iOS and iPadOS 0 < 27

macOS 0 < 27

References

https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.