EN PT-BR
← Voltar ao feed
critical

CERT-FR warns of multiple Apple vulnerabilities across iOS, macOS and Safari, with CVE-2026-86950 actively exploited

1 fonte(s) · 1 atualização(ões) · publicado 26/10/2026 21:00 · coletado há 4 dias

CERT-FR published advisory CERTFR-2026-AVI-1387 on 27 October 2026 on multiple vulnerabilities in Apple products. They affect iOS, iPadOS, macOS (Golden Gate, Sequoia, Tahoe), Safari, tvOS, visionOS and watchOS. According to the advisory, the flaws allow arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality and integrity. Apple states that CVE-2026-86950 is actively exploited. The advisory is based on Apple security bulletins published on 26 October 2026 and references several hundred CVE identifiers, mostly in the CVE-2026-1124xx to CVE-2026-1126xx range, plus the older CVE-2019-5598 and CVE-2022-26704.

Entenda a falha

A vulnerabilidade

CERT-FR advisory CERTFR-2026-AVI-1387 covers several hundred vulnerabilities in Apple products, mostly CVE-2026-1124xx to 1126xx, plus the older CVE-2019-5598 and CVE-2022-26704. The most severe is CVE-2026-86950, which Apple says is actively exploited. The advisory does not map CVEs to components, attacker requirements or CVSS scores. Overall impact: arbitrary code execution, privilege escalation, security policy bypass, and loss of data confidentiality and integrity. Affected: iOS and iPadOS before 18.7.11, 26.7.2 or 27.2 (depending on branch); macOS Sequoia before 15.8.2, Tahoe before 26.7.2, Golden Gate before 27.2; Safari, tvOS, visionOS and watchOS before 27.2. The fixes are in those releases.

Como funciona

The articles do not describe how any of these flaws work. The advisory gives no per-CVE component, input or failure step, including for the actively exploited CVE-2026-86950. The only thing stated is the combined outcome: code execution, privilege escalation, policy bypass and data exposure. For the mechanism of each flaw, defenders need to consult the Apple bulletins referenced by CERT-FR.

Por que é vulnerável

The articles do not state the root cause of any of these vulnerabilities, nor why they went unnoticed. The only remediation described is installing the updated releases listed in Apple's bulletins of 26 October 2026.

Como foi descoberta

The articles do not say who found the flaws or how. Apple published its security bulletins (149225, 149227, 149230 and 149521 to 149527) on 26 October 2026, and CERT-FR issued its advisory on 27 October 2026 based on them. Apple states that CVE-2026-86950 is actively exploited; no details are given on the exploitation context, threat actor or IOCs.

Explicação gerada por IA a partir da matéria e dos artigos, em 28/10/2026 14:31.

Detalhes técnicos

  • Impact listed: arbitrary code execution, privilege escalation, security policy bypass, and compromise of data confidentiality and integrity.
  • Affected versions:
    • iOS and iPadOS before 18.7.11, before 26.7.2 and before 27.2
    • macOS Golden Gate before 27.2
    • macOS Sequoia before 15.8.2
    • macOS Tahoe before 26.7.2
    • Safari, tvOS, visionOS and watchOS before 27.2
  • Active exploitation is reported only for CVE-2026-86950. The advisory gives no details on the exploitation context, threat actor, CVSS scores or IOCs.
  • The advisory gives no per-CVE mapping of components or impact.
  • Apple bulletins referenced: 149225, 149227, 149230 and 149521 to 149527.

Remediação

  • Apply the updates listed in the Apple security bulletins of 26 October 2026 (for example https://support.apple.com/en-us/149225).
  • Prioritise devices that can be patched against the actively exploited CVE-2026-86950.

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 26/10/2026 21:00 · coletado 28/10 14:01 primeiro registro

    CERT-FR warns of multiple Apple vulnerabilities across iOS, macOS and Safari, with CVE-2026-86950 actively exploited

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1387 on 27 October 2026 on multiple vulnerabilities in Apple products. They affect iOS, iPadOS, macOS (Golden Gate, Sequoia, Tahoe), Safari, tvOS, visionOS and watchOS. According to the advisory, the flaws allow arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality and integrity. Apple states that CVE-2026-86950 is actively exploited. The advisory is based on Apple security bulletins published on 26 October 2026 and references several hundred CVE identifiers, mostly in the CVE-2026-1124xx to CVE-2026-1126xx range, plus the older CVE-2019-5598 and CVE-2022-26704.

    Technical Details

    • Impact listed: arbitrary code execution, privilege escalation, security policy bypass, and compromise of data confidentiality and integrity.
    • Affected versions:
      • iOS and iPadOS before 18.7.11, before 26.7.2 and before 27.2
      • macOS Golden Gate before 27.2
      • macOS Sequoia before 15.8.2
      • macOS Tahoe before 26.7.2
      • Safari, tvOS, visionOS and watchOS before 27.2
    • Active exploitation is reported only for CVE-2026-86950. The advisory gives no details on the exploitation context, threat actor, CVSS scores or IOCs.
    • The advisory gives no per-CVE mapping of components or impact.
    • Apple bulletins referenced: 149225, 149227, 149230 and 149521 to 149527.

    Remediation

    • Apply the updates listed in the Apple security bulletins of 26 October 2026 (for example https://support.apple.com/en-us/149225).
    • Prioritise devices that can be patched against the actively exploited CVE-2026-86950.