Live › vulnerability › CVE-2026-86964
Go to dashboardA null pointer dereference in Apple's operating systems can be triggered by an app, causing unexpected system termination. The fix is input validation added in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27 and watchOS 27.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Owners of Apple devices running the listed versions are affected, since any installed app may be able to trigger the crash. The sources do not say whether managed or enterprise devices are treated differently. Teams that only run Apple hardware in a fixed, patched state can skip urgent action, but the impact is a crash rather than code execution.
No product ranges from the sources yet.
sw_vers -productVersion on macOS; unknown whether the sources list other checks.26.7.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
This page as .md · .json · in your agent: get_signal("CVE-2026-86964")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.