Advisoriesby IbisAppleCVE-2026-86888
Apple iOS and iPadOS: improper privilege management
Fix: upgrade to 27 or later (3 fixed versions below)
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| iOS and iPadOS Product | < 27 | 27 |
| macOS Product | < 26.7 | 26.7 |
| < 27 | 27 | |
| tvOS Product | < 27 | 27 |
| visionOS Product | < 27 | 27 |
| watchOS Product | < 27 | 27 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Severity from
- CISA (its enrichment of the CVE record)
- Weakness
- CWE-269