CVE-2026-86913CWE-416

CVE-2026-86913

Medium · published October 20, 2026

CVSS v3.1

5.4

EPSS

Percentile

18.3

In the wild

Unconfirmed

What it is

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

The record

Technical detail

CVSS v3.1: 5.4 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0: Not supplied
EPSS: 0.00271 · 18.3th percentile
Weakness: CWE-416 · Use After Free
Published: 2026-10-20T05:17Z

References (8)

https://support.apple.com/en-us/149034 · [email protected]https://support.apple.com/en-us/149035 · [email protected]https://support.apple.com/en-us/149036 · [email protected]https://support.apple.com/en-us/149037 · [email protected]https://support.apple.com/en-us/149038 · [email protected]https://support.apple.com/en-us/149041 · [email protected]https://support.apple.com/en-us/149042 · [email protected]https://support.apple.com/en-us/149043 · [email protected]

EPSS history

Timeline

21 OCT 03:32Z
EPSS moved — → 0%
epss
20 OCT 00:50Z
A use after free issue was addressed with improved memory management
cvelistv5
20 OCT 00:50Z
A use after free issue was addressed with improved memory management
cvelistv5