CVE-2026-86888
Summary
| CVE | CVE-2026-86888 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-14 21:17:39 UTC |
| Updated | 2026-09-14 21:17:39 UTC |
| Description | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier. |
Risk And Classification
Problem Types: A local app may be able to read a persistent account identifier
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Apple | IOS And IPadOS | affected 27 custom | Not specified |
| CNA | Apple | MacOS | affected 26.7 custom | Not specified |
| CNA | Apple | MacOS | affected 27 custom | Not specified |
| CNA | Apple | TvOS | affected 27 custom | Not specified |
| CNA | Apple | VisionOS | affected 27 custom | Not specified |
| CNA | Apple | WatchOS | affected 27 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| support.apple.com/en-us/149035 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149038 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149037 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149042 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149036 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149034 | [email protected] | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.