MEDIUM Published October 26, 2026

CVE-2026-86990

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A malicious app may be able to access the camera without user permission.

CVSS base score

5.1 (v3.1)

Severity

MEDIUM

Attack vector

Local

Weakness

CWE-284

Last modified

November 4, 2026

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

apple ipados apple iphone os apple macos apple visionos

References

support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory

View full NVD advisory →

More apple vulnerabilities

Published the same day

← Back to CVE watch

CVE-2026-86990

Affected products

References

More apple vulnerabilities

Published the same day

Related reading