CVE-2026-86891

INFO Priority: 0.00 BB Relevance: 0/100

Published: 2026-09-14 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Bluetooth device information.

Weakness Classification (1)

CWE-285

Affected Software (2)

Vendor	Product	Version
apple	macos	15.0 – 15.8
apple	watchos	< 27.0

References & Advisories (4)

https://support.apple.com/en-us/149035

Vendor Advisory

https://support.apple.com/en-us/149037

Vendor Advisory

https://support.apple.com/en-us/149042

Vendor Advisory

https://support.apple.com/en-us/149043

Vendor Advisory

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.23%

Raw Score 0.002280

Percentile 13.6%

Date 2026-10-29

EPSS Trend

2026-10-29

0.00228

2026-10-28

0.00228

Intelligence Sources

mitre ref →

External Links

NVD (NIST) CVE Details FIRST EPSS API OSV.dev