CVE-2026-86922
Received Received - Intake

Type Confusion in Safari with Arbitrary Code Execution

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Apple Inc.

Description
A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-10-20
AI Q&A
2026-10-20
EPSS Evaluated
N/A
NVD
CVE-2026-86922
EUVD
EUVD-2026-104721

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Apple Safari 0
Apple iOS and iPadOS 0
Apple macOS 0
Apple visionOS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

A type confusion issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution.

Detection Guidance

Detection requires checking installed versions of affected Apple products. For Safari, run softwareupdate --list on macOS or check App Store updates. For iOS/iPadOS/macOS/visionOS, check Settings > General > Software Update. If versions are below 27, the system is vulnerable.

Impact Analysis

This vulnerability could allow attackers to execute arbitrary code on your device by tricking you into visiting a specially crafted website.

Mitigation Strategies

Update all affected Apple products to version 27 or later immediately. For Safari, update via the App Store. For iOS/iPadOS/macOS/visionOS, install updates through Settings > General > Software Update. Disable web browsing or use alternative browsers until updates are applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86922. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart