Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2026-86919

Quick assessment

Affected
Apple iOS and iPadOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

通过加强输入验证,修复了一个堆栈溢出漏洞。该问题已在以下系统中得到修复:iOS 26.7、iPadOS 26.7、iOS 27、iPadOS 27、macOS Golden Gate 27、macOS Sequoia 15.8、macOS Tahoe 26.7 以及 visionOS 27。若攻击者拥有已配对的蓝牙设备,可能会利用此漏洞执行任意代码。

AI Predicted 8.8 Difficulty: Moderate EPSS 0.33% · P25

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 6

VendorProduct Version RangeStatus
Apple iOS and iPadOS < 26.7 affected
< 27 affected
Apple macOS < 15.8 affected
< 26.7 affected
< 27 affected
Apple visionOS < 27 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-86919

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Apple iOS and iPadOS 0 ~ 26.7 -
Apple macOS 0 ~ 15.8 -
Apple visionOS 0 ~ 27 -

II. Public POCs for CVE-2026-86919

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-86919

请登录查看更多情报信息。

Same Patch Batch · Apple · 2026-10-20 · 46 CVEs total

CVE-2026-86940 macOS Golden Gate 27 内核内存泄露漏洞
CVE-2026-86953 Apple iOS 27 等越界写入导致拒绝服务漏洞
CVE-2026-86963 iOS/iPadOS 26.7/27 拒绝服务漏洞
CVE-2026-86977 iOS/iPadOS 27 授权漏洞:应用可发起通话或发送消息
CVE-2026-86976 iOS/iPadOS/macOS 27 授权问题致敏感数据泄露
CVE-2026-86975 iOS 27 等系统图片处理越界读取漏洞
CVE-2026-86979 macOS Golden Gate 27 隐私漏洞:应用可访问敏感数据
CVE-2026-86981 macOS Sequoia 15.8/Tahoe 26.7 越界写漏洞
CVE-2026-86962 iOS/macOS等系统双释放漏洞
CVE-2026-86957 Apple 多系统越界读取漏洞
CVE-2026-86955 iOS 27 和 iPadOS 27 越权访问敏感数据漏洞
CVE-2026-86948 Xcode 27 二进制文件沙盒逃逸漏洞
CVE-2026-86949 Xcode 27 恶意应用沙盒逃逸漏洞
CVE-2026-86944 iOS/macOS 越界写入漏洞
CVE-2026-86935 macOS Golden Gate 27 越权访问敏感数据
CVE-2026-86932 macOS Golden Gate 27 授权漏洞致敏感数据泄露
CVE-2026-86928 macOS Golden Gate 27 路径处理漏洞
CVE-2026-86933 macOS Golden Gate 27 权限漏洞
CVE-2026-86921 iOS/iPadOS 26.7 等权限问题致本地文件被覆盖
CVE-2026-86922 Safari 27 类型混淆漏洞致任意代码执行

Showing top 20 of 46 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2026-86919

No comments yet


Leave a comment