Out-of-Bounds Write in Apple iOS and macOS

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: Apple Inc.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-09-15

AI Q&A

2026-09-15

EPSS Evaluated

N/A

NVD

CVE-2026-86876

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ios	to 27 (inc)
apple	ipados	to 27 (inc)
apple	macos_golden_gate	27
apple	macos_sequoia	15.8
apple	macos_tahoe	to 27 (inc)
apple	visionos	27
apple	watchos	27

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability caused by insufficient bounds checking. A sandboxed process could exploit this to write data outside its allocated memory space, potentially bypassing sandbox restrictions and gaining unauthorized access to system resources or data.

Impact Analysis

If exploited, this vulnerability could allow an attacker to escape the sandbox environment on your device. This might lead to unauthorized access to sensitive data, execution of arbitrary code, or installation of malicious software on your system.

Mitigation Strategies

Update affected Apple devices to the latest versions mentioned in the CVE description (iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27) to address the out-of-bounds write issue.

Hi! I’m here to help you understand CVE-2026-86876. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70