AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

AppleCVE-2026-86961

Apple iOS and iPadOS: race condition

Apple

CVE-2026-86961 · Published Oct 20, 2026 · updated Nov 2, 2026

High7.8
Fix: upgrade to 27 or later (2 fixed versions below)
Apple advisory

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.

Affected versions

PackageAffectedFixed in
iOS and iPadOS
Product
< 2727
macOS
Product
< 2727
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-362

More Apple advisories

All Apple
High 7.5Oct 20Apple iOS and iPadOS: improper authorizationCVE-2026-86977fixed in 27Medium 5.5Oct 20Apple macOS: information disclosureCVE-2026-86979fixed in 27Medium 5.5Oct 20Apple macOS: out-of-bounds writeCVE-2026-86981fixed in 15.8 +1Medium 5.5Oct 20Apple macOS: information disclosureCVE-2026-86940fixed in 27Medium 5.5Oct 20Apple iOS and iPadOS: out-of-bounds writeCVE-2026-86944fixed in 26.7 +2High 8.8Oct 20Apple Xcode: untrusted functionality includedCVE-2026-86948fixed in 27