CVE-2026-86961

No fix known EPSS <1%CVSS 7.8

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.