CVE-2026-86895

No fix known EPSS <1%CVSS 7.5

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.

Published 2026-09-14 · CVE record · OSV

Products: Apple iOS and iPadOS, Apple tvOS, Apple visionOS, Apple watchOS