CVE-2026-86896
Quick assessment
Affected
Apple macOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
已通过对权限问题增加额外限制予以修复。该问题已在 macOS Golden Gate 27.2、macOS Sequoia 15.8.2 和 macOS Tahoe 26.7.2 中修复。恶意应用程序可能借此获取 root 权限。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1548.001 · Setuid and Setgid
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-86896
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-86896
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-86896
请登录查看更多情报信息。
Same Patch Batch · Apple · 2026-10-26 · 324 CVEs total
| CVE-2026-86936 | macOS 多版本逻辑漏洞可提权至 root | |
| CVE-2026-112500 | iOS 27.2 等系统 Hide My Email 逻辑漏洞致邮箱泄露 | |
| CVE-2026-112691 | iOS 26.7.2 等越界写入漏洞 | |
| CVE-2026-112557 | macOS 多版本隐私偏好设置绕过漏洞 | |
| CVE-2026-112668 | macOS 多版本逻辑漏洞可提权至 root | |
| CVE-2026-112687 | iOS/iPadOS/tvOS 27.2 远程内存损坏漏洞 | |
| CVE-2026-112541 | macOS 15.8.2 等版本目录解析提权漏洞 | |
| CVE-2026-112453 | macOS 多版本沙箱逃逸漏洞 | |
| CVE-2026-112516 | iOS 等系统存在释放后使用漏洞 | |
| CVE-2026-84634 | iOS 27 等系统竞态条件漏洞可致系统终止 | |
| CVE-2026-112701 | iOS/iPadOS 26.7.2 和 27.2 授权漏洞 | |
| CVE-2026-112469 | iOS 26.7.2 等越界写漏洞修复 | |
| CVE-2026-112595 | iOS 27.2 等系统 Thread 网络认证绕过漏洞 | |
| CVE-2026-86920 | iOS/macOS/visionOS 授权绕过漏洞 | |
| CVE-2026-113940 | macOS Golden Gate 27.2 越界读取漏洞 | |
| CVE-2026-112652 | iOS/macOS 等逻辑漏洞致证书验证绕过 | |
| CVE-2026-113901 | Safari 27.2 等存在释放后使用漏洞 | |
| CVE-2026-112428 | macOS 逻辑漏洞：应用可绕过 Gatekeeper | |
| CVE-2026-65363 | iOS/macOS 越狱：应用可突破沙盒限制 | |
| CVE-2026-112629 | iOS/macOS 越界读取漏洞修复 |
Showing top 20 of 324 CVEs. View all on vendor page → →