CVE-2026-86944

Undergoing Analysis Undergoing Analysis - In Progress

Out-of-Bounds Write in iOS and macOS Systems

Publication date: 2026-10-20

Last updated on: 2026-10-30

Assigner: Apple Inc.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-30

Generated

2026-11-09

AI Q&A

2026-10-20

EPSS Evaluated

2026-11-07

NVD

CVE-2026-86944

EUVD

EUVD-2026-104727

Affected Vendors & Products

Vendor	Product	Version / Range
Apple	iOS and iPadOS	0
Apple	macOS	0
Apple	macOS	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability caused by insufficient bounds checking. It allows an application to write data outside the intended memory buffer, potentially leading to system crashes or unexpected behavior.

Detection Guidance

This vulnerability is specific to Apple operating systems and requires checking system versions. Detection involves verifying if your device is running an affected version of iOS, iPadOS, or macOS. No direct commands are provided in the context to detect exploitation, but you can check your system version using built-in commands like 'sw_vers' on macOS or 'Settings > General > About' on iOS/iPadOS.

Impact Analysis

An attacker could exploit this to cause an app to crash or terminate the system unexpectedly. This may lead to denial-of-service conditions or data corruption if exploited maliciously.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other standards as it only causes unexpected system termination. No data exposure or integrity issues are described.

Mitigation Strategies

Update your Apple devices to the latest versions: iOS 26.7 or iPadOS 26.7 for mobile devices, and macOS Sequoia 15.8 or macOS Tahoe 26.7 for computers. This addresses the out-of-bounds write issue by applying the necessary bounds checking improvements.

Hi! I’m here to help you understand CVE-2026-86944. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...