CVE-2026-86988

None

CVSS

—

EPSS

0.2%

Published

Oct 26, 2026

CISA due date

—

The record

The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.

Affected packages

Ecosystem	Package	Introduced	Fixed