CVE-2026-86950: macOS

This is a record in the CVE List, the public register of security flaws. CISA added it to its list of flaws known to be used by attackers on 29 Sept 2026. The title and any summary are in the source's own words.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions o

Kind: Digest
Started: 28 Sept 2026, 20:13
Why we can name the supplier: An official register says it: a CVE record, CISA's list of exploited flaws or the NCSC

Read it at the source

Products it names

macOS (Apple)

The latest

We aim to update this thread. For the latest, check the supplier's own page directly: www.cve.org/CVERecord?id=CVE-2026-86950.

This entry comes from our research build of public sources made on 24 Oct 2026.