CVE record · 7 sources
CVE-2026-86950
KEV · due 13 Oct 2026 (overdue)CVSS 8.8Apple Multiple Products Out-of-Bounds Write Vulnerability
- Vendor
- Apple
- Product
- Multiple Products
- CVSS
- 8.8
- EPSS
- 0.26 (p98)
- CISA KEV
- added 29 Sep 2026, due 13 Oct 2026 (19d overdue)
- Weakness
- CWE-787
- Exposure class
- Mobile OS, Operating system
Coverage
6Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.
-
Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)
Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is already being exploited. iOS…
-
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability This type of…
-
Have an older iPhone or iPad? Apple has a security update for you
Apple has fixed a flaw exploited in targeted attacks to the iPhone XS, XS Max and XR, and seventh-generation iPad.
-
5th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Arizona’s state court system has suffered a phishing-led cyberattack after an…
-
Apple Patches for October 2026
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update.