CVE-2026-86950
Last modified
CVE-2026-86950 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. CISA has confirmed active exploitation in the wild. EPSS estimates a 26.17% chance of exploitation in the next 30 days.
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
Metrics
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | < 18.7.11 |
| Apple | Ipados | >= 26.0, < 26.7.1 |
| Apple | Iphone Os | < 18.7.11 |
| Apple | Iphone Os | >= 26.0, < 26.7.1 |
| Apple | Macos | < 15.8.1 |
| Apple | Macos | >= 26.0, < 26.7.1 |
References
- https://support.apple.com/en-us/149225Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149226Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149228Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149229Release Notes, Vendor Advisory
- https://seclists.org/fulldisclosure/2026/Sep/89Mailing List, Third Party Advisory
- https://seclists.org/fulldisclosure/2026/Sep/90Mailing List, Third Party Advisory
- https://seclists.org/fulldisclosure/2026/Sep/91Mailing List, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-86950?
How severe is CVE-2026-86950?
How do I fix CVE-2026-86950?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-86944An out-of-bounds write issue was addressed with improved bou…5.5
- CVE-2026-86945This issue was addressed with improved checks. This issue is…7.1
- CVE-2026-86946A use-after-free issue was addressed with improved memory ma…7.7
- CVE-2026-86948This issue was addressed by enforcing library validation on …8.8
- CVE-2026-86949This issue was addressed by enforcing library validation on …8.8
- CVE-2026-8695radare2 6.1.5 contains a use-after-free vulnerability in the…9.8
- CVE-2026-86953An out-of-bounds write issue was addressed with improved bou…4.6
- CVE-2026-86954An out-of-bounds read was addressed with improved bounds che…6.5
- CVE-2026-86955An authorization issue was addressed with improved state man…5.5
- CVE-2026-86957An out-of-bounds read was addressed with improved bounds che…6.5
- CVE-2026-86958The issue was addressed with improved memory handling. This …7.8
- CVE-2026-86959An input validation issue was addressed with improved input …4.3
Are you affected by CVE-2026-86950?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST