---
id: "CVE-2026-86976"
kind: "vulnerability"
aliases: ["CVE-2026-86976"]
title: "Apple iOS, iPadOS and macOS: app can access sensitive user data"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple-devices", "infrastructure", "ios", "ipados", "macos"]
not_affected_if: []
published_at: "2026-10-20T01:17:29+00:00"
first_seen_at: "2026-10-23T21:57:19+00:00"
updated_at: "2026-10-25T04:12:32+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86976", "first_seen_at": "2026-10-23T21:57:19+00:00"}]
---

# Apple iOS, iPadOS and macOS: app can access sensitive user data

An authorization flaw in Apple's iOS 27, iPadOS 27 and macOS Golden Gate 27 lets an installed app reach sensitive user data it should not see. The sources do not describe the affected component or the exact data involved.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Update to iOS 27, iPadOS 27 or macOS Golden Gate 27 (exact fixed build not stated in the sources)

## Timeline

- 2026-10-23T21:57:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-86976

## From the sources

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_