CVEvulnerability
CVE-2026-86897
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-14
- Last modified
- 2026-09-18
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-862
Description
This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data.
Affected configurations
• apple safari (< 27.0)
• apple ipados (< 26.7)
• apple iphone os (< 26.7)
• apple macos (< 27.0)
• apple visionos (< 27.0)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://support.apple.com/en-us/149034 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149035 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149038 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149039 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149041 Release Notes, Vendor Advisory