CVE-2026-86871

Analyzed Analyzed - Analysis Complete

Integer Underflow in macOS Golden Gate Leading to System Termination

Publication date: 2026-10-20

Last updated on: 2026-11-03

Assigner: Apple Inc.

Description

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-03

Generated

2026-11-09

AI Q&A

2026-10-20

EPSS Evaluated

2026-11-07

NVD

CVE-2026-86871

EUVD

EUVD-2026-104710

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 15.8 (exc)
apple	macos	From 26.0 (inc) to 26.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is an integer underflow issue caused by insufficient input validation. It occurs when an attacker controlling a network file server exploits this flaw to potentially cause unexpected system termination.

Detection Guidance

This vulnerability involves an integer underflow due to insufficient input validation in macOS versions prior to Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. Detection requires checking macOS version and monitoring for unexpected system terminations linked to network file server interactions.

Impact Analysis

If you use a vulnerable version of macOS, an attacker with control over a network file server could trigger unexpected system crashes, leading to denial of service or potential data loss.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves an integer underflow leading to unexpected system termination, which may affect system availability but lacks details on data exposure or privacy implications.

Mitigation Strategies

Update to the latest versions of macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 to address the integer underflow issue.

Hi! I’m here to help you understand CVE-2026-86871. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...