Use-After-Free Vulnerability in Safari Browser by Apple
CVE-2026-86986

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-86986?

A use-after-free vulnerability was discovered in Safari that can lead to unexpected crashes when processing maliciously crafted web content. This issue, related to memory management, has been addressed in various versions of Safari and Apple’s operating systems. Users are advised to update their devices to the latest versions to mitigate risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Sep 8, 2026

CVE-2026-86986 Data

JSON