Authorization Flaw in Apple iOS and macOS Products
CVE-2026-86976

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Vendor
CVE Published:
20 October 2026

What is CVE-2026-86976?

An authorization flaw present in several Apple operating systems including iOS 27, iPadOS 27, and macOS Golden Gate 27 has been identified. This vulnerability allows unauthorized access to sensitive user information due to improper state management. Users are encouraged to update their devices to the latest versions to mitigate potential risks associated with this flaw.

Affected Version(s)

iOS and iPadOS 0 < 27

macOS 0 < 27

References

https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.