中文

// CVE · PUBLISHED 2026-09-28

CVE-2026-86950

Apple / iOS and iPadOS · Apple / macOS

8.8 · CVSS 3.1HighCISA KEV

CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.