CVE-2026-86948

critical

Description

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.

References

https://support.apple.com/en-us/149040

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104728

Details

Source: Mitre, NVD

Published: 2026-10-20

Updated: 2026-10-21

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Severity: Critical

EPSS

EPSS: 0.00136