CVE-2026-86887
published 2026-09-14CVE-2026-86887: A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be…
PriorityP411low3.3CVSS 3.1
AVLACLPRLUINSUCLINAN
EPSS
0.16%
4.2th percentile
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 26.7 | 26.7 |
| apple | ios_and_ipados | < 27 | 27 |
| apple | ipados | < 26.7 | 26.7 |
| apple | iphone_os | < 26.7 | 26.7 |
| apple | visionos | < 27 | 27 |
| apple | visionos | < 27.0 | 27.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS/iPadOS/visionOS prior 26.7/27 information disclosure
vuldb·2026-09-15
CVE-2026-86887 [LOW] Apple iOS/iPadOS/visionOS prior 26.7/27 information disclosure
A vulnerability was found in Apple iOS, iPadOS and visionOS. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in information disclosure.
This vulnerability is cataloged as CVE-2026-86887. The attack must be initiated from a local position. There is no exploit available.
Upgrading the affected component is advised.
GHSA
A privacy issue was addressed by removing sensitive data.
ghsa_unreviewed·2026-09-14
CVE-2026-86887 A privacy issue was addressed by removing sensitive data.
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences.
No detection rules found.
No public exploits indexed.
2026-09-14
Published