This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 15 Sep 2026 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | App Unauthorized Access to Sensitive User Data Due to Improper Entitlement Checks in Apple Web Browsers and Operating Systems | |
| Weaknesses | CWE-269 CWE-284 |
Tue, 15 Sep 2026 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple ios And Ipados Apple macos Apple safari Apple visionos |
|
| Vendors & Products |
Apple
Apple ios And Ipados Apple macos Apple safari Apple visionos |
Mon, 14 Sep 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data. | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: apple
Published:
Updated: 2026-09-14T20:47:54.746Z
Reserved: 2026-09-08T16:43:41.873Z
Link: CVE-2026-86897
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-09-14T21:17:40.587
Modified: 2026-09-15T14:38:06.923
Link: CVE-2026-86897
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-09-15T11:45:17Z