Live › vulnerability › CVE-2026-86968
Go to dashboardApple fixed an access control flaw in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2 and visionOS 27.2. A malicious app may be able to reach restricted system interfaces or launder launch attribution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Devices running the affected Apple operating systems before 27.2 are exposed to a malicious installed app. The sources do not say which configurations or app types are needed, so unknown for who can skip it. Fleet owners should update all Apple devices.
No product ranges from the sources yet.
sw_vers on macOS) and compare it to 27.227.2 or later27.2 or later27.2 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution.
This page as .md · .json · in your agent: get_signal("CVE-2026-86968")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.