APPLE IPADOS · CVE-2026-86887 · Vendor
FIX → 26.7 · 27.0
Apple's advisory for visionOS 27 lists many fixed security issues, mostly memory corruption and privacy or permission bugs in system components. The excerpt covers CVE-2026-86887 only as the advisory's own identifier and does not describe this CVE's specific flaw.
first public Sep 14, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Not affected if other-apple-platforms
Who cares apple, apple-vision-pro, vendor-advisory, visionos
Upgrade to 26.7 · 27.0
About the security content of visionOS 27 - Apple Support
This document describes the security content of visionOS 27.
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.
Apple security documents reference vulnerabilities by CVE-ID when possible.
For more information about security, see the Apple Product Security page.
Released September 14, 2026
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted image may lead to unexpected process termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86882: Peter Malone
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted image may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86918: Arni Hardarson (Neonix Security)
Entry added October 19, 2026
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or write kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
CVE-2026-84523: Cem Onat Karagun, an anonymous researcher
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: A privacy issue was addressed with improved access restrictions.
CVE-2026-84582: Zhongcheng Li (CK01)
Entry added October 19, 2026
Available for: Apple Vision Pro (all models)
Impact: A local app may be able to read a persistent account identifier
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-86888: Zhongcheng Li (CK01)
Available for: Apple Vision Pro (all models)
Impact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account
Description: An authentication issue was addressed with improved state management.
CVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: An authorization issue was addressed with improved state management.
CVE-2026-86920: Johan Wahyudi
Entry added October 26, 2026
Impact: An app may be able to cause unexpected system termination or write kernel memory
Description: A race condition was addressed with additional validation.
CVE-2026-84634: S. Rosario
Entry added October 26, 2026
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84595: tamdao
Entry added October 26, 2026
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory management.
CVE-2026-65407: Franco Belman at Blackwing Intelligence
Available for: Apple Vision Pro (all models)
Impact: An app may be able to leak sensitive user information
Description: A logic issue was addressed with improved checks.
CVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin
Available for: Apple Vision Pro (all models)
Impact: An app may be able to delete credentials stored in Keychain
Description: This issue was addressed by removing the vulnerable code.
CVE-2026-86905: Ilya Andr (andrd3v)
Impact: A local app may be able to read a persistent account identifier
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-84583: Zhongcheng Li from IES Red Team
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: The issue was addressed with improved checks.
CVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: A type confusion issue was addressed with improved memory handling.
CVE-2026-84616: Peter Malone
Impact: A sandboxed app may be able to execute arbitrary code with kernel privileges
Description: A race condition was addressed with improved state management.
CVE-2026-84607: Ruslan Dautov
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: A logic issue was addressed with improved validation.
CVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security
Impact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution
Description: An out-of-bounds write issue was addressed with improved bounds checking.
Impact: An app may gain unauthorized access to Bluetooth
Description: An authorization issue was addressed with improved state management.
CVE-2026-84560: an anonymous researcher
Impact: An attacker in radio range may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84613: jioundai
Entry added October 19, 2026
Available for: Apple Vision Pro (all models)
Impact: A local app may be able to read a persistent account identifier
Description: An information disclosure issue was addressed with improved state management.
CVE-2026-86895: Stanislav Jelezoglo
Impact: An app may be able to read device name
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-86893: Heiner Gerdes
Available for: Apple Vision Pro (all models)
Impact: An archive may be able to bypass Gatekeeper
Description: A file quarantine bypass was addressed with additional checks.
CVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher
Available for: Apple Vision Pro (all models)
Impact: An app may be able to modify protected parts of the file system
CVE-2026-86966: Jihwan Yoon
Entry added October 26, 2026
Impact: An attacker with a paired Bluetooth device may be able to execute arbitrary code
Description: A stack overflow was addressed with improved input validation.
CVE-2026-86919: Mathis Mansière
Entry added October 19, 2026
Impact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien
Entry added October 26, 2026
Impact: Processing a maliciously crafted image may lead to arbitrary code execution
Description: A memory corruption issue was addressed by removing the vulnerable code.
CVE-2026-64752: Nik Tsytsarkin
Impact: A sandboxed process may be able to circumvent sandbox restrictions
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86876: Chris Bailey - Short Circuit
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted video file may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-65344: Siyeong kim
Available for: Apple
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.