CVE-2026-86953: An attacker in physical proximity may be able to cause a denial-of-service in Apple iOS and iPadOS

This vulnerability involves an out-of-bounds write that could be triggered by an attacker physically near the device, resulting in a denial-of-service. Apple fixed the issue by improving bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27. No CVSS score is provided, and no known exploits in the wild have been reported.

An attacker in physical proximity may cause a denial-of-service on affected Apple devices running iOS or iPadOS versions prior to 27. This could disrupt device availability but does not indicate code execution or data compromise based on the provided information.

Update affected Apple operating systems to version 27 or later, where the vulnerability has been fixed with improved bounds checking. No other mitigation is indicated.