Skip to content
Multiple Vulnerabilities in Apple Products Allow Remote Code Execution

Multiple Vulnerabilities in Apple Products Allow Remote Code Execution

First seen 27 Oct 2026, 21:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 00:17 UTC
  • •CVE-2026-86950 is actively exploited, with CISA listing it in the KEV Catalog.
  • •Vulnerabilities affect multiple Apple operating systems, including iOS, macOS, and watchOS.
  • •Users should update to the latest versions to mitigate risks from these vulnerabilities.

Multiple vulnerabilities have been identified in Apple products, with the most severe allowing for arbitrary code execution. Affected systems include iOS, iPadOS, macOS, tvOS, watchOS, and visionOS, particularly versions prior to 27.2 and 18.7.11. The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-86950 to its Known Exploited Vulnerabilities Catalog, indicating. Other vulnerabilities include CVE-2026-112427 and CVE-2026-112438, both rated high in severity. Attackers could exploit these vulnerabilities to install programs, view or change data, and take control of devices. Apple has released patches for the affected versions, and users are urged to update immediately.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-28
CVE-2026-86950 published
CVE-2026-86950, allowing arbitrary code execution, was published with a CVSS score of 8.8.
Cisecurity
2026-09-29
CVE-2026-86950 added to CISA KEV Catalog
CISA added CVE-2026-86950 to its Known Exploited Vulnerabilities Catalog, indicating active exploitation.
Cisecurity
2026-10-26
Multiple CVEs published
Several vulnerabilities including CVE-2026-112427 and CVE-2026-112438 were published, with CVSS scores indicating high severity.
Hkcert
2026-10-26
CVE-2026-112427 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-26
CVE-2026-112430 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-26
CVE-2026-112434 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-26
CVE-2026-112437 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-26
CVE-2026-112438 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-26
CVE-2026-112484 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-26
CVE-2026-112487 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (8)

Following this threat?

Track CVE-2026-112427 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (48)

1 / 3

Common questions

Which versions are affected?
Versions prior to iOS 18.7.11, iPadOS 18.7.11, and macOS Golden Gate 27.2 are affected.
Is there confirmed exploitation?
Yes, CVE-2026-86950 is confirmed to be actively exploited according to CISA.
What should users do?
Users should immediately update their devices to the latest versions to mitigate risks.