CVE-2026-86974

Vendor

Apple

Product

Safari, iOS and iPadOS, macOS, visionOS

CVSS

8.8

EPSS

0.002 (p9)

Exposure class

Browser, Mobile OS, Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 29
   ZDI advisory ZDI 4d ago

   Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a…

   CVSS 8.8 CVE-2026-86974 Apple
2. 24
   CVE NVD 5d ago

   A type confusion issue was addressed with improved checks.

   A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web…

   Fix available CVE-2026-86974 Apple