Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution.

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the affected application or, in some cases, with root, system, or kernel privileges. Depending on the privileges associated with the application or service, an attacker could then install programs; view, change, or delete data; or take further control of the affected device.

Apple has indicated that CVE-2026-86950 may have been exploited. On September 29, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-86950 to its Known Exploited Vulnerabilities (KEV) Catalog.

Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Details of the most severe of these vulnerabilities are as follows. For a full list of vulnerabilities, please visit the Apple advisories listed in the reference section.

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the affected application or with elevated privileges. Depending on the privileges associated with the application or service, an attacker could then install programs; view, change, or delete data; or take further control of the affected device. Failed exploitation could result in a denial-of-service condition.

We recommend the following actions be taken:

Copyright©2026 Center for Internet Security®