Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.
Published: 2026-09-14
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Kernel memory disclosure
Action: Patch
AI Analysis

Impact

An out‑of‑bounds read can expose kernel memory to applications. Until the public releases of Apple iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27, any app that can trigger the flaw may read sensitive kernel data.

Affected Systems

Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS are impacted. All builds prior to the 27 releases contain the issue; the patch is incorporated in the 27 releases and later.

Risk and Exploitability

The EPSS is below 1 % and the vulnerability is not listed in CISA KEV, indicating a low exploitation probability. The CVSS score of 5.5 denotes moderate severity. The likely attack vector is a compromised or malicious application that initiates the out‑of‑bounds read; successful exploitation would leak kernel memory, potentially aiding later attacks. No public exploits are known.

Generated by OpenCVE AI on September 20, 2026 at 18:53 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the device to Apple iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 or watchOS 27, or later releases.
  • Restart the device after the update to ensure kernel changes take effect.
  • If the device cannot be updated, restrict it to run only sandboxed applications and consider limiting network access for non‑essential apps.

Generated by OpenCVE AI on September 20, 2026 at 18:53 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
Title Kernel Memory Disclosure via an Out‑of‑Bounds Read in Apple Operating Systems

Wed, 16 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
Title Kernel Memory Disclosure via Out‑Of‑Bounds Read in Apple Operating Systems

Wed, 16 Sep 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os

Tue, 15 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 08:30:00 +0000

Type Values Removed Values Added
Title Kernel Memory Disclosure via Out‑Of‑Bounds Read in Apple Operating Systems
Weaknesses CWE-125

Tue, 15 Sep 2026 03:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Tvos Visionos Watchos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-15T15:22:29.546Z

Reserved: 2026-09-08T16:43:41.873Z

Link: CVE-2026-86903

cve-icon Vulnrichment

Updated: 2026-09-15T15:22:22.005Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-14T21:17:41.140

Modified: 2026-09-16T01:02:03.510

Link: CVE-2026-86903

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T19:00:04Z

Weaknesses