{"metadata": {"count": 1, "page": 1, "per_page": 100}, "data": [{"uuid": "b82d3c4f-7ac8-45af-abfe-3620e3ec396d", "vulnerability": {"vulnId": "CVE-2026-86950", "altId": []}, "gcve": {"origin_uuid": "cce329bf-df49-4c6e-a027-80be2e6483bd", "object_uuid": "b82d3c4f-7ac8-45af-abfe-3620e3ec396d"}, "status": {"exploited": true, "status_reason": "confirmed", "status_updated_at": "2026-10-08T02:00:00+02:00"}, "timestamps": {"asserted_at": "2026-10-08T00:00:00+00:00", "recorded_at": "2026-10-15T04:37:01+00:00", "first_seen_at": "2026-10-08T00:00:00+00:00"}, "scope": {"notes": "Affected: Apple / macOS, iOS and iPadOS | Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27. | Patched since: 2026/09/28 | Exploitation type: unknown | CWEs: CWE-787 | Origin source: CSIRT-IE | Notes: https://support.apple.com/en-us/149226"}, "evidence": [{"type": "csirt_report", "source": "enisa-cnw-kev", "signal": "successful_exploitation", "confidence": 0.75, "details": {"cwes": ["CWE-787"], "euvd": "EUVD-2026-88445", "notes": "https://support.apple.com/en-us/149226", "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON", "product": "macOS, iOS and iPadOS", "dateReported": "2026/10/08", "originSource": "CSIRT-IE", "patchedSince": "2026/09/28", "vendorProject": "Apple", "exploitationType": ["unknown"], "vulnerabilityName": "", "threatActorsExploiting": []}}], "references": [{"id": "CVE-2026-86950", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86950"}, {"id": "EUVD-2026-88445", "url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-88445"}, {"id": "source", "url": "https://support.apple.com/en-us/149226"}]}]}