Apple iOS and iPadOS vulnerabilities

CVE-2026-86898 Medium · 5.4 CWE-79 Sep 14, 2026

Cross-site Scripting (XSS) in Apple Safari

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.

CVE-2026-86897 Medium · 5.5 CWE-862 Sep 14, 2026

Missing Authorization in Apple Safari

This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data.

CVE-2026-86895 High · 7.5 CWE-200 Sep 14, 2026

Exposure of Sensitive Information in Apple Ipados

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.

CVE-2026-86893 Low · 3.3 CWE-269 Sep 14, 2026

Improper Privilege Management in Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name.

CVE-2026-86892 Medium · 5.5 CWE-770 Sep 14, 2026

Allocation of Resources Without Limits or Throttling in Apple Ipados

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to cause a denial-of-service.

CVE-2026-86890 Medium · 4.6 CWE-287 Sep 14, 2026

Improper Authentication in Apple Ipados

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information.

CVE-2026-86888 Low · 3.3 CWE-269 Sep 14, 2026

Improper Privilege Management in Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.

CVE-2026-86887 Low · 3.3 CWE-200 Sep 14, 2026

Exposure of Sensitive Information in Apple Ipados

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences.

CVE-2026-86886 Medium · 5.5 CWE-22 Sep 14, 2026

Path Traversal in Apple Ipados

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files.

CVE-2026-86885 Medium · 6.5 CWE-20 Sep 14, 2026

Improper Input Validation in Apple Ipados

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination.

CVE-2026-86884 Medium · 5.5 CWE-269 Sep 14, 2026

Improper Privilege Management in Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-86883 Medium · 5.5 CWE-200 Sep 14, 2026

Exposure of Sensitive Information in Apple Ipados

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data.

CVE-2026-86882 Medium · 6.5 CWE-787 Sep 14, 2026

Out-of-bounds Write in Apple Ipados

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.

CVE-2026-86881 Critical · 9.1 CWE-295 Sep 14, 2026

Improper Certificate Validation in Apple Ipados

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.

CVE-2026-86879 Medium · 6.5 CWE-20 Sep 14, 2026

Improper Input Validation in Apple Ipados

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service.

CVE-2026-86878 Medium · 5.5 CWE-200 Sep 14, 2026

Exposure of Sensitive Information in Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.

CVE-2026-86876 Medium · 5.2 CWE-787 Sep 14, 2026

Out-of-bounds Write in Apple Ipados

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.

CVE-2026-86870 Medium · 6.5 CWE-122 Sep 14, 2026

Heap-based Buffer Overflow in Apple Ipados

A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2026-86869 Medium · 6.5 CWE-787 Sep 14, 2026

Out-of-bounds Write in Apple Ipados

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination.

CVE-2026-84636 Medium · 5.5 CWE-285 Sep 14, 2026

Improper Authorization in Apple Ipados

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-84635 Medium · 6.5 CWE-843 Sep 14, 2026

Type Confusion in Apple Safari

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.

CVE-2026-84632 High · 7.3 CWE-120 Sep 14, 2026

Classic Buffer Overflow in Apple Ipados

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

CVE-2026-84630 Medium · 4.7 CWE-362 Sep 14, 2026

Race Condition in Apple Ipados

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

CVE-2026-84629 High · 7.5 CWE-862 Sep 14, 2026

Missing Authorization in Apple Ipados

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user.

CVE-2026-84628 Medium · 5.5 CWE-863 Sep 14, 2026

Incorrect Authorization in Apple Ipados

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain.