CVE
CVE-2026-86987
- First Reported
- Oct 27, 2026
- Latest Reported
- Oct 27, 2026
CVE Enrichment
- EPSS
- 0.19%
- EPSS Percentile
- 8.74%
- CISA KEV
- Not listed
Description
An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.
Technical Details
- CNA / NVD Source
- [email protected]
- Published
- 27-Oct-2026 04:20
- Last Modified
- 27-Oct-2026 21:52
- EPSS Date
- 2026-10-27
References
Last enrichment sync: 28-Oct-2026 04:46
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- Notable among the defects is an authorization issue in Apple Intelligence (CVE-2026-86987) that could be exploited by a remote attacker to access sensitive user data. The iPhone maker said the issue was addressed in iOS Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
CVE (3)
MITRE ATT&CK (1)
Vendors (1)
Products (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.