Live › vulnerability › CVE-2026-86961
Go to dashboardA race condition in Apple's operating systems lets a malicious app break out of its sandbox. Apple fixed it with additional validation in iOS 27, iPadOS 27 and macOS Golden Gate 27.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Apple devices running iOS, iPadOS or macOS builds before the 27 releases are exposed to any installed app that can exploit the race condition. Sources do not say which earlier versions are affected or whether managed fleets need extra steps. Devices already on the fixed releases are not affected.
No product ranges from the sources yet.
27 or later27 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.
This page as .md · .json · in your agent: get_signal("CVE-2026-86961")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.