Live › vulnerability › CVE-2026-86978
Go to dashboardApple's advisory says a malicious or compromised app may be able to access sensitive user data on iOS 27, iPadOS 27, macOS Golden Gate 27 and tvOS 27 before version 27.2. The advisory gives no detail on which data or how the access works.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Owners and administrators of Apple devices running iOS 27, iPadOS 27, macOS Golden Gate 27 or tvOS 27 before 27.2. The sources do not say which data types or app permissions are involved, so whether a given device or fleet is exposed beyond the version check is unknown.
No product ranges from the sources yet.
27.2 in the fix list27.227.227.2Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-86978")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.