Improper Access Control in Apple's iOS, iPadOS, macOS, and tvOS
CVE-2026-86978

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-86978?

A vulnerability exists in iOS, iPadOS, macOS, and tvOS that could allow an app to bypass intended access controls, potentially leading to unauthorized access to sensitive user information. This issue was mitigated through enhanced validation checks, and users are encouraged to update to the latest versions for improved security.

Affected Version(s)

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

tvOS 0 < 27.2

References

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

https://support.apple.com/en-us/149524

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Sep 8, 2026

CVE-2026-86978 Data

JSON