AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleCVE-2026-86921

Apple iOS and iPadOS: improper privilege management

Apple

CVE-2026-86921 · Published Oct 20, 2026 · updated Nov 9, 2026

Medium6.2
Fix: upgrade to 26.7 or later (3 fixed versions below)
Apple advisory

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.

Affected versions

PackageAffectedFixed in
iOS and iPadOS
Product
< 26.726.7
< 2727
macOS
Product
< 2727
visionOS
Product
< 2727
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-269

More Apple advisories

All Apple
High 7.5Oct 20Apple iOS and iPadOS: improper authorizationCVE-2026-86977fixed in 27Medium 5.5Oct 20Apple macOS: information disclosureCVE-2026-86979fixed in 27Medium 5.5Oct 20Apple macOS: out-of-bounds writeCVE-2026-86981fixed in 15.8 +1Medium 5.5Oct 20Apple iOS and iPadOS: improper authorizationCVE-2026-86976fixed in 27 +1Medium 5.9Oct 20Apple iOS and iPadOS: denial of serviceCVE-2026-86963fixed in 26.7 +1Medium 4.3Oct 20Apple iOS and iPadOS: out-of-bounds readCVE-2026-86975fixed in 27 +2