Overview
What is CVE-2026-86961?
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27.
A malicious app may be able to break out of its sandbox.
Source: NVD
Vulnerability intelligence
CVE-2026-86961 and is rated High severity with a CVSS score of 7.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27.
A malicious app may be able to break out of its sandbox.
Source: NVD