CVE-2026-86968

mediumpriority · track · 0EPSS 0.002 · 14 %ileDEFRNL
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.23% (14th) EPSS
CVSS 5.1 · medium
Is it mine?
11 products
Check your exposure
Who says so?
3 sources
cert_bund · ncsc_nl · certfr

EPSS · scored 2026-10-27

An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution.

01

cvss

Technical severity, 0–10. One row per scoring source.

5.1
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Nsecondary · grimoire (LLM-derived)LLM-inferred
02

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-266USLLM-inferred
03

affected products (11)

Products and version ranges known to be affected.

04

advisories (4)

Vendor and ecosystem advisories describing this.

  • NCSC-2026-0455Kwetsbaarheden verholpen in Apple MacOSNL2026-10-27csaf · ncsc_nlNL

    Apple heeft meerdere kwetsbaarheden verholpen in macOS, met name in de versies Golden Gate 27.2, Sequoia 15.8.2, Tahoe 26.7.2 en Monterey 12.4.

  • NCSC-2026-0456Kwetsbaarheden verholpen in Apple iOS en iPadOSNL2026-10-27csaf · ncsc_nlNL

    Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.

  • WID-SEC-W-2026-4165Apple iOS, iPadOS, macOS und Safari: Mehrere SchwachstellenDeutsch2026-10-26csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Apple iOS, Apple iPadOS, Apple macOS und Apple Safari ausnutzen, um erweiterte Berechtigungen – einschließlich Root-Rechte – zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

  • CERTFR-2026-AVI-1387Multiples vulnérabilités dans les produits AppleFrançais2026-10-27vendor · certfrFR
05

sources

Which sources assert this record, and when.

cert_bundncsc_nlcertfrNVDCVE.orgMITRE
published 2026-10-26modified 2026-10-27
06

references (3) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan