{"id":"CVE-2026-86976","kind":"vulnerability","aliases":["CVE-2026-86976"],"related":[],"title":"Apple iOS, iPadOS and macOS: app can access sensitive user data","description":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data.","summary":"An authorization flaw in Apple's iOS 27, iPadOS 27 and macOS Golden Gate 27 lets an installed app reach sensitive user data it should not see. The sources do not describe the affected component or the exact data involved.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","ios","ipados","macos"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- Update to iOS 27, iPadOS 27 or macOS Golden Gate 27 (exact fixed build not stated in the sources)","status":"open","published_at":"2026-10-20T01:17:29+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T04:12:32+00:00","updated_at":"2026-10-25T04:12:32+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T04:12:32Z","model":"claude-haiku-5-5","output":{"fix":"- Update to iOS 27, iPadOS 27 or macOS Golden Gate 27 (exact fixed build not stated in the sources)","reach":"local","title":"Apple iOS, iPadOS and macOS: app can access sensitive user data","impact":"medium","summary":"An authorization flaw in Apple's iOS 27, iPadOS 27 and macOS Golden Gate 27 lets an installed app reach sensitive user data it should not see. The sources do not describe the affected component or the exact data involved.","category":"infrastructure","nicknames":[],"who_cares":["ios","ipados","macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app reads sensitive user data it should not access","analyst_note":"Check Apple's security release notes for the iOS 27 and macOS Golden Gate 27 builds to find the affected component and fixed version.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Devices running iOS 27, iPadOS 27 or macOS Golden Gate 27 before the fix are the ones the sources name. Any app installed on such a device could be the source of the access. The sources do not say which configurations or data types are involved, so who can skip it is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000567,"input_tokens":3260,"output_tokens":483,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-86976':14A,17A '27':32B,34B,39B,80C,83C,87C 'abl':92C 'access':8A,94C 'address':69C 'affect':58B 'app':6A,43B,89C 'appl':1A,19B,29B 'apple-devic':18B 'author':26B,66C 'compon':59B 'cve':12A,15A 'data':11A,47B,63B,97C 'describ':56B 'devic':20B 'exact':62B 'fix':77C 'flaw':27B 'gate':38B,86C 'golden':37B,85C 'improv':71C 'infrastructur':21B 'instal':42B 'involv':64B 'io':2A,22B,31B,79C 'ipado':3A,23B,33B,82C 'issu':67C,75C 'let':40B 'maco':5A,24B,36B,84C 'manag':73C 'may':90C 'reach':44B 'see':51B 'sensit':9A,45B,95C 'sourc':53B 'state':72C 'user':10A,46B,96C","nicknames":[],"mitigations":[],"who_affected":"Devices running iOS 27, iPadOS 27 or macOS Golden Gate 27 before the fix are the ones the sources name. Any app installed on such a device could be the source of the access. The sources do not say which configurations or data types are involved, so who can skip it is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86976","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86976","severity":null,"published_at":"2026-10-20T01:17:29+00:00","modified_at":"2026-10-20T15:03:59+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}