CVE-2026-86988
published 2026-10-26CVE-2026-86988: The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2…
PriorityP427high7.8
EPSS
0.22%
12.6th percentile
The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 27.2 | 27.2 |
| apple | macos | < 27.2 | 27.2 |
| apple | tvos | < 27.2 | 27.2 |
| apple | visionos | < 27.2 | 27.2 |
| apple | watchos | < 27.2 | 27.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
The issue was addressed with improved checks.
ghsa_unreviewed·2026-10-26
CVE-2026-86988 The issue was addressed with improved checks.
The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
VulDB
Apple iPadOS/iOS/macOS/tvOS/visionOS/watchOS up to 27.1 information disclosure
vuldb·2026-10-26
CVE-2026-86988 [LOW] Apple iPadOS/iOS/macOS/tvOS/visionOS/watchOS up to 27.1 information disclosure
A vulnerability described as problematic has been identified in Apple iPadOS, iOS, macOS, tvOS, visionOS and watchOS up to 27.1. Impacted is an unknown function. Executing a manipulation can lead to information disclosure.
This vulnerability is registered as CVE-2026-86988. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is recommended.
No detection rules found.
No public exploits indexed.
2026-10-26
Published