Apple Safari UAF Crash before 27.2
CVE-2026-86986 Published on October 26, 2026

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

NVD

Products Associated with CVE-2026-86986

Want to know whenever a new CVE is published for Apple products? stack.watch will email you.

Apple Safari

Apple Ios And Ipados

Apple macOS

Apple visionOS

Affected Versions

Apple Safari:

Before 27.2 is affected.

Apple iOS and iPadOS:

Before 26.7.2 is affected.
Before 27.2 is affected.

Apple macOS:

Before 27.2 is affected.

Apple visionOS:

Before 27.2 is affected.