This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/149034 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/149035 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/149038 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/149039 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/149041 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
18 Sep 2026, 12:22
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
|
| References | () https://support.apple.com/en-us/149034 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/149035 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/149038 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/149039 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/149041 - Release Notes, Vendor Advisory | |
| First Time |
Apple safari
Apple ipados Apple Apple macos Apple visionos Apple iphone Os |
16 Sep 2026, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-862 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
Information
Published : 2026-09-14 21:17
Updated : 2026-09-18 12:22
NVD link : CVE-2026-86897
Mitre link : CVE-2026-86897
CVE.ORG link : CVE-2026-86897
JSON object : View
Products Affected
apple
- macos
- iphone_os
- ipados
- safari
- visionos
CWE
CWE-862
Missing Authorization