CVE-2026-86963

Analyzed Analyzed - Analysis Complete

Denial-of-Service in iOS and iPadOS

Publication date: 2026-10-20

Last updated on: 2026-11-05

Assigner: Apple Inc.

Description

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-05

Generated

2026-11-09

AI Q&A

2026-10-20

EPSS Evaluated

2026-11-07

NVD

CVE-2026-86963

EUVD

EUVD-2026-104736

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ipados	to 26.7.2 (exc)
apple	iphone_os	to 26.7.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This is a denial-of-service vulnerability caused by insufficient input validation. An attacker in a privileged network position could exploit it to disrupt service by sending malformed data to an affected system.

Detection Guidance

This vulnerability is specific to iOS and iPadOS versions before 26.7 and 27. It involves a denial-of-service issue caused by improved input validation flaws. Detection would require checking the iOS/iPadOS version on devices. No specific commands are provided in the context to detect this issue.

Impact Analysis

If exploited, this vulnerability could cause your iOS or iPadOS device to become unresponsive or crash, leading to temporary loss of functionality until the device is restarted or updated.

Compliance Impact

The provided CVE data does not specify how this denial-of-service vulnerability impacts compliance with standards like GDPR or HIPAA. The issue involves potential service disruption but lacks details on data exposure or regulatory implications.

Mitigation Strategies

Update iOS and iPadOS to version 26.7, 27, or later to address the denial-of-service vulnerability.

Hi! I’m here to help you understand CVE-2026-86963. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...