First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-86979

MediumCVSS 5.5/10Last modified Oct 29, 2026

Description

A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Apple	macOS	< 27

References

https://support.apple.com/en-us/149035Release Notes, Vendor Advisory

Timeline

Published: Oct 20, 2026
Last modified: Oct 29, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-86986.4The Cryptocurrency Prijsvergelijking Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0. This is due to CVE-2026-869815.5An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An ap CVE-2026-869835.9A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its lengt CVE-2026-869845.5A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in mac CVE-2026-869856.5This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPad CVE-2026-869867.5A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS CVE-2026-869875.5An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker ma CVE-2026-869884.3The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 2 CVE-2026-869895.1An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadO CVE-2026-86997.0A stored Cross-Site Scripting (XSS) vulnerability has been identified in the web-based management interface of Archer C5 v6.8 routers, due t CVE-2026-869905.1An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadO CVE-2026-869917.5A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2

CVE-2026-86979: Medium severity, CVSS 5.5 | Vulnix