AppleCVE-2026-86893
Apple iOS and iPadOS: improper privilege management
Fix: upgrade to 27 or later (3 fixed versions below)
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| iOS and iPadOS Product | < 27 | 27 |
| tvOS Product | < 27 | 27 |
| visionOS Product | < 27 | 27 |
| watchOS Product | < 27 | 27 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Severity from
- CISA (its enrichment of the CVE record)
- Weakness
- CWE-269