CVE-2026-86919
Received Received - Intake

Stack Overflow in Apple iOS and macOS

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Apple Inc.

Description
A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-10-20
AI Q&A
2026-10-20
EPSS Evaluated
N/A
NVD
CVE-2026-86919
EUVD
EUVD-2026-104719

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
Apple iOS and iPadOS 0
Apple iOS and iPadOS 0
Apple macOS 0
Apple macOS 0
Apple macOS 0
Apple visionOS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack overflow caused by insufficient input validation in Apple's operating systems. An attacker with a paired Bluetooth device could exploit this to execute arbitrary code on affected devices.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your device, potentially leading to unauthorized access, data theft, or installation of malware. It specifically requires the attacker to have a paired Bluetooth device.

Mitigation Strategies

Update affected Apple devices to the latest versions: iOS 26.7 or later, iPadOS 26.7 or later, iOS 27 or later, iPadOS 27 or later, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, or visionOS 27. Disable Bluetooth pairing with untrusted devices until updates are applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86919. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart