{"id":"CVE-2026-86953","kind":"vulnerability","aliases":["CVE-2026-86953"],"related":[],"title":"Apple OS: out-of-bounds write lets nearby attacker crash devices","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","summary":"Apple's advisory describes an out-of-bounds write that was fixed with better bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27. An attacker in physical proximity may be able to cause a denial of service, meaning a crash or hang of the device.","severity":"medium","cvss":4.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","ios","ipados","macos","other"],"not_affected_if":[],"how_to_check":null,"fix":"- Update to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 or watchOS 27 (the fixed release is not named in the sources)","status":"open","published_at":"2026-10-20T01:17:28+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T04:35:35+00:00","updated_at":"2026-10-25T04:35:35+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-25T04:35:35Z","model":"claude-haiku-5-5","output":{"fix":"- Update to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 or watchOS 27 (the fixed release is not named in the sources)","reach":"network","title":"Apple OS: out-of-bounds write lets nearby attacker crash devices","impact":"low","summary":"Apple's advisory describes an out-of-bounds write that was fixed with better bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27. An attacker in physical proximity may be able to cause a denial of service, meaning a crash or hang of the device.","category":"other","nicknames":[],"who_cares":["apple","ios","macos","ipados"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Denial of service: device crashes or hangs when a nearby attacker triggers it.","analyst_note":"Check Apple's security release notes for the affected component and the exact fixed build; the NVD entry does not name the component or the proximity channel (e.g. Bluetooth, Wi-Fi).","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000568,"input_tokens":3307,"output_tokens":475,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-86953':15A,18A '27':42B,44B,48B,50B,52B,55B,97C,100C,104C,106C,108C,110C 'abl':63B,118C 'address':86C 'advisori':25B 'appl':1A,19B,23B 'attack':10A,57B,112C 'better':37B 'bound':6A,31B,38B,82C,89C 'caus':65B,120C 'check':39B,90C 'crash':11A,72B 'cve':13A,16A 'denial':67B,123C 'denial-of-servic':122C 'describ':26B 'devic':12A,77B 'fix':35B,94C 'gate':47B,103C 'golden':46B,102C 'hang':74B 'improv':88C 'io':20B,41B,96C 'ipado':21B,43B,99C 'issu':84C,92C 'let':8A 'maco':22B,45B,101C 'may':61B,116C 'mean':70B 'nearbi':9A 'os':2A 'out-of-bound':3A,28B,79C 'physic':59B,114C 'proxim':60B,115C 'servic':69B,125C 'tvos':49B,105C 'visiono':51B,107C 'watcho':54B,109C 'write':7A,32B,83C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:28+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86953","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86953","severity":null,"published_at":"2026-10-20T01:17:28+00:00","modified_at":"2026-10-20T15:03:59+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}