Live › vulnerability › CVE-2026-86963
Go to dashboardApple fixed a denial-of-service flaw in iOS and iPadOS that is addressed by improved input validation. An attacker in a privileged network position may be able to crash or disrupt affected devices.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of iPhone and iPad devices running iOS or iPadOS releases before 26.7 or 27 are exposed. The sources describe the attacker as needing a privileged network position, so the risk is mainly on hostile or compromised networks. Organisations with managed devices should check their update policy; the sources do not say which devices or configurations are most at risk.
No product ranges from the sources yet.
26.7 or later on iPhone and iPad devicesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.
This page as .md · .json · in your agent: get_signal("CVE-2026-86963")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.