5.5Medium

CVE-2026-86987

Apple iOS and iPadOS Published: (18 days ago)

Description

An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.

Weakness (CWE): CWE-862

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Apple iOS and iPadOS < 27.2
apple ipados < 27.2
apple iphone os < 27.2

References and patches

CPE matches (NVD) (2)

  • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* < 27.2
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* < 27.2