CVE-2026-86921
Quick assessment
Affected
Apple iOS and iPadOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
通过加强验证措施，修复了一个权限问题。该问题已在 iOS 26.7、iPadOS 26.7、iOS 27、iPadOS 27、macOS Golden Gate 27 以及 visionOS 27 中修复。本地攻击者可能能够覆盖受限制的文件。
Possible ATT&CK Techniques 1 AI
T1548.001 · Setuid and Setgid
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-86921
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-86921
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-86921
请登录查看更多情报信息。
Same Patch Batch · Apple · 2026-10-20 · 46 CVEs total
| CVE-2026-86940 | macOS Golden Gate 27 内核内存泄露漏洞 | |
| CVE-2026-86953 | Apple iOS 27 等越界写入导致拒绝服务漏洞 | |
| CVE-2026-86963 | iOS/iPadOS 26.7/27 拒绝服务漏洞 | |
| CVE-2026-86977 | iOS/iPadOS 27 授权漏洞：应用可发起通话或发送消息 | |
| CVE-2026-86976 | iOS/iPadOS/macOS 27 授权问题致敏感数据泄露 | |
| CVE-2026-86975 | iOS 27 等系统图片处理越界读取漏洞 | |
| CVE-2026-86979 | macOS Golden Gate 27 隐私漏洞：应用可访问敏感数据 | |
| CVE-2026-86981 | macOS Sequoia 15.8/Tahoe 26.7 越界写漏洞 | |
| CVE-2026-86962 | iOS/macOS等系统双释放漏洞 | |
| CVE-2026-86957 | Apple 多系统越界读取漏洞 | |
| CVE-2026-86955 | iOS 27 和 iPadOS 27 越权访问敏感数据漏洞 | |
| CVE-2026-86948 | Xcode 27 二进制文件沙盒逃逸漏洞 | |
| CVE-2026-86949 | Xcode 27 恶意应用沙盒逃逸漏洞 | |
| CVE-2026-86944 | iOS/macOS 越界写入漏洞 | |
| CVE-2026-86935 | macOS Golden Gate 27 越权访问敏感数据 | |
| CVE-2026-86932 | macOS Golden Gate 27 授权漏洞致敏感数据泄露 | |
| CVE-2026-86928 | macOS Golden Gate 27 路径处理漏洞 | |
| CVE-2026-86933 | macOS Golden Gate 27 权限漏洞 | |
| CVE-2026-86919 | iOS/macOS 等系统蓝牙栈溢出漏洞 | |
| CVE-2026-86922 | Safari 27 类型混淆漏洞致任意代码执行 |
Showing top 20 of 46 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-86921
No comments yet