Out-of-Bounds Read Vulnerability in Safari and Apple Products
CVE-2026-86973

Currently unrated

Key Information:

Vendor

Apple
Status
Safari
iOS And iPad OS
Mac OS
Vendor
CVE Published:
26 October 2026

What is CVE-2026-86973?

An out-of-bounds read vulnerability has been identified that affects Safari and several Apple operating systems. This issue arises from improper bounds checking, allowing maliciously crafted web content to potentially cause an unexpected process crash. Apple has addressed this vulnerability with updates released in Safari 27.2, iOS 26.7.2, iPadOS 26.7.2, and subsequent versions. Users are encouraged to update their systems to enhance security and avoid potential exploits.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.