Description
An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.
Published: 2026-10-20
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://support.apple.com/en-us/149034 cve-icon cve-icon
History

Thu, 29 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-863
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Title Authorization Issue Allowing App to Initiate Calls or Send Messages on iOS and iPadOS
Weaknesses CWE-285

Tue, 20 Oct 2026 04:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Vendors & Products Apple
Apple ios And Ipados

Tue, 20 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
Description An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.
References

Subscriptions

Apple Ios And Ipados
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-10-29T17:29:14.555Z

Reserved: 2026-09-08T16:43:47.662Z

Link: CVE-2026-86977

cve-icon Vulnrichment

Updated: 2026-10-29T17:28:51.505Z

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-10-20T01:17:29.353

Modified: 2026-10-29T18:17:35.963

Link: CVE-2026-86977

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T12:00:16Z

Weaknesses