GHSA-3cf3-h799-fjvqHighCVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...
🔗 CVE IDs covered (1)
📋 Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
🔗 References (9)
- https://nvd.nist.gov/vuln/detail/CVE-2026-86950
- https://support.apple.com/en-us/149226
- https://support.apple.com/en-us/149228
- https://support.apple.com/en-us/149229
- http://seclists.org/fulldisclosure/2026/Sep/89
- http://seclists.org/fulldisclosure/2026/Sep/90
- http://seclists.org/fulldisclosure/2026/Sep/91
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950
- https://github.com/advisories/GHSA-3cf3-h799-fjvq