CVE-2026-86950

HIGH 8.8 KNOWN EXPLOITED

Published 2026-09-28 · Last modified 2026-10-01

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2026-09-29. Patch or mitigate now.

Exploitation likelihood

1.2%chance of exploitation in 30 days · 69th percentile

● In CISA KEV (2026-09-29) ○ Public exploit / PoC

Impact if exploited

8.8CVSS 3.1 · HIGH

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

What an attacker needs

✓Access: Reachable over the network — no local access needed
✓Privileges: No account or privileges required
⚠User interaction: A user must take an action (click / open a file)
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

github-search Search GitHub for public PoC repos

Test against your own equipment

curl -s https://vulnpedia.com/cve/CVE-2026-86950/poc.jsonMachine-readable PoC index for this CVE (for automation).

Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-86950/poc.json

Affected

Vendors Apple

Products Ios And Ipados Macos Ipados Iphone Os

Weakness (CWE)

CWE-787: Out-of-bounds Write

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Affected Software Configurations

Vendor	Product	Version range
Apple	Ipados	< 26.7.1
Apple	Iphone Os	< 26.7.1
Apple	Macos	< 15.8.1
Apple	Macos	≥ 26.0 and < 26.7.1

All CVSS metrics

HIGH 8.8 v3.1 · ADP Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
HIGH 8.8 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Advisories

https://support.apple.com/en-us/149226 Release NotesVendor Advisory
https://support.apple.com/en-us/149228 Release NotesVendor Advisory
https://support.apple.com/en-us/149229 Release NotesVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950 government-resourceUS Government Resource
http://seclists.org/fulldisclosure/2026/Sep/89 Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2026/Sep/90 Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2026/Sep/91 Mailing ListThird Party Advisory

Sources: NVD · CVE.org · EPSS