CVE-2026-86888

Katalog CVE

CVSS 3.3 · Low EPSS 0,14%

Kerentanan Improper Privilege Management pada apple ipados, apple iphone os +4 lainnya. Skor CVSS 3.1 3.3 (Low) menurut CISA ADP.

Deskripsi (NVD)

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.

Rincian

Terbit di NVD

14 September 2026

Terakhir diubah

21 September 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 3,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/149034 advisory vendor · release notes
• https://support.apple.com/en-us/149035 advisory vendor · release notes
• https://support.apple.com/en-us/149036 advisory vendor · release notes
• https://support.apple.com/en-us/149037 advisory vendor · release notes
• https://support.apple.com/en-us/149038 advisory vendor · release notes
• https://support.apple.com/en-us/149042 advisory vendor · release notes