High · 7.8 CVE-2026-86961 EUVD-2026-104734GHSA-qhj5-j72v-q72x

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious a…

Published Oct 20, 2026 · Updated Oct 26, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Platform: iOS Platform: macOS

Description

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 27	27
Apple	macOS	< 27	27

Advisories 1

WID-SEC-2026-3352 Apple iOS, iPadOS, macOS Tahoe, macOS Golden Gate, macOS Sequoia und Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 26, 2026

References

https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035