Unrated severityNVD Advisory· Published Oct 26, 2026

CVE-2026-86964

Description

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

Affected products

Apple Inc./tvOSllm-fuzzy
Range: =27
Apple Inc./Ipadosllm-fuzzy
Range: =27
Apple Inc./watchOSllm-fuzzy
Range: =27
Apple Inc./macOS Golden Gatellm-fuzzy
Range: =27
Apple Inc./Visionosllm-fuzzy
Range: =27
Apple Inc./macOS Tahoellm-fuzzy
Range: =26.7.2
Apple Inc./iOSllm-fuzzy
Range: =27

Patches

Vulnerability mechanics

References

support.apple.com/en-us/149034nvd
support.apple.com/en-us/149035nvd
support.apple.com/en-us/149036nvd
support.apple.com/en-us/149037nvd
support.apple.com/en-us/149038nvd
support.apple.com/en-us/149522nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000