CVE-2026-86919

Published 20 October 2026 · tracked since 21 October 2026

Description

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-103119 CRITICAL 9.1
• CVE-2026-101356 CRITICAL 9.1
• CVE-2026-105941 HIGH 8.1
• CVE-2026-113385 MEDIUM 5.3
• CVE-2026-105311 HIGH 7.7
• CVE-2026-105312 CRITICAL 9.9
• CVE-2026-113356 HIGH 7.5
• CVE-2026-113382 MEDIUM 6.3
• CVE-2026-108089 HIGH 7.5
• CVE-2026-113381 HIGH 7.3

→ Open the live CVE board · all tools