CVE-2026-86880None▾ SunlitThis issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
ios_and_ipados < 26.7.2ios_and_ipados < 27Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-84627NoneA buffer overflow was addressed with improved bounds checking
CVE-2026-64750NoneAn out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-86942NoneAn out-of-bounds read was addressed with improved bounds checking
CVE-2026-86954NoneAn out-of-bounds read was addressed with improved bounds checking
CVE-2026-86920Medium· 5.5An authorization issue was addressed with improved state management
CVE-2026-65363NoneThe issue was addressed with improved checks