A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-86964
NONE
EPSS 0.22%
Updated Oct 27, 2026
https://support.apple.com/en-us/149034
product-security@apple.com
https://support.apple.com/en-us/149035
product-security@apple.com
https://support.apple.com/en-us/149036
product-security@apple.com
https://support.apple.com/en-us/149037
product-security@apple.com
https://support.apple.com/en-us/149038
product-security@apple.com
https://support.apple.com/en-us/149522
product-security@apple.com
CVE Details
CVE ID
CVE-2026-86964
Published Date
Oct 27, 2026
Vendor
Not specified
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.22%
Likelihood of exploitation in next 30 days
Percentile:
12.6th percentile (higher than 12.6% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory