CVE-2026-86887Published

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences.

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-86887

Published

iOS and iPadOS

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Apple",
                    "product": "iOS and iPadOS",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "lessThan": "26.7",
                            "versionType": "custom"
                        },
                        {
                            "version": "0",
                            "status": "affected",
                            "lessThan": "27",
                            "versionType": "custom"
                        }
                    ]
                }

visionOS

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Apple",
                    "product": "visionOS",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "lessThan": "27",
                            "versionType": "custom"
                        }
                    ]
                }