CVE-2026-86950

High CVSS 8.8 Known exploited

Published 2026-09-28 · last changed 2026-10-27 · added to CISA KEV 2026-09-29

The fix

We hold no Microsoft remediation data for CVE-2026-86950, which normally means it isn't a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release. NVD lists the affected software below.

What it is

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

Affected software

apple ipados (before 18.7.11; from 26.0, before 26.7.1)
apple iphone os (before 18.7.11; from 26.0, before 26.7.1)
apple macos (before 15.8.1; from 26.0, before 26.7.1)

As listed by NVD. Version ranges vary per entry, so check the NVD record before treating a product name here as a yes or a no for a specific version.

Sources

NVD affected-version ranges (RFF fetched it 2026-10-27)
CISA Known Exploited Vulnerabilities catalog

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H