CVE-2026-86874

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.

• CWE-125

• https://support.apple.com/en-us/149040Vendor Advisory, Release Notes

Published

Oct 20, 2026

Last Modified

Oct 29, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86867Cinnamon's Kotaemon (all versions up to and including v0.12.…6.5
• CVE-2026-86868An authentication issue was addressed with improved state ma…9.1
• CVE-2026-86869An out-of-bounds write issue was addressed with improved bou…6.5
• CVE-2026-86870A heap buffer overflow was addressed with improved bounds ch…6.5
• CVE-2026-86871An integer underflow was addressed with improved input valid…5.9
• CVE-2026-86872A logic issue was addressed with improved state management. …5.4
• CVE-2026-86875An input validation issue was addressed with improved input …4.3
• CVE-2026-86876An out-of-bounds write issue was addressed with improved bou…5.2
• CVE-2026-86877A path traversal issue was addressed with improved path vali…
• CVE-2026-86878A permissions issue was addressed with additional restrictio…5.5
• CVE-2026-86879A denial-of-service issue was addressed with improved input …6.5
• CVE-2026-8688The Advance Nav Menu Manager plugin for WordPress is vulnera…4.3