CVE-2026-86924
published 2026-09-14CVE-2026-86924: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden…
PriorityP421medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.16%
4.8th percentile
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 26.7 | 26.7 |
| apple | ios_and_ipados | < 27 | 27 |
| apple | ipados | < 26.7 | 26.7 |
| apple | iphone_os | < 26.7 | 26.7 |
| apple | macos | < 26.7 | 26.7 |
| apple | macos | < 27 | 27 |
| apple | macos | >= 26.0 < 26.7 | 26.7 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS/iPadOS/macOS up to 26/26.6 memory corruption
vuldb·2026-09-15
CVE-2026-86924 [LOW] Apple iOS/iPadOS/macOS up to 26/26.6 memory corruption
A vulnerability marked as problematic has been reported in Apple iOS, iPadOS and macOS up to 26/26.6. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption.
This vulnerability is traded as CVE-2026-86924. An attack has to be approached locally. There is no exploit available.
It is suggested to upgrade the affected component.
GHSA
A memory corruption issue was addressed with improved input validation.
ghsa_unreviewed·2026-09-14
CVE-2026-86924 A memory corruption issue was addressed with improved input validation.
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination.
No detection rules found.
No public exploits indexed.
2026-09-14
Published