Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple SafariApple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability

Risk 74

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-86974.

First published (updated )
Advisory
ZDI-26-830

Apple SafariZDI-26-830: Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability

Risk 77

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-86974.

First published (updated )
ZDI-CAN-34401

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 123
Source: Apple
First published (updated )
CVE-2026-112621

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 33
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 217
Source: MITRE
First published (updated )
CVE-2026-113904

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 33
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 204
Source: MITRE
First published (updated )
CVE-2026-112599

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
First published (updated )
CVE-2026-86974

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 217
Source: MITRE
First published (updated )
CVE-2026-86986

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 218
Source: Apple
First published (updated )
CVE-2026-86985

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 219
Source: Apple
First published (updated )
CVE-2026-112699

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 26
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 217
Source: MITRE
First published (updated )
CVE-2026-112693

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 219
Source: MITRE
First published (updated )
CVE-2026-112697

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Severity
8.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 219
Source: NVD
First published (updated )
CVE-2026-112655

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 77
Severity
8.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 219
Source: NVD
First published (updated )
CVE-2026-112651

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 77
Severity
8.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 219
Source: MITRE
First published (updated )
CVE-2026-112623

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 23
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 219
Source: MITRE
First published (updated )
CVE-2026-112686

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 221
Source: MITRE
First published (updated )
CVE-2026-112673

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 210
Source: MITRE
First published (updated )
CVE-2026-112669

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 38
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 210
Source: MITRE
First published (updated )
CVE-2026-112666

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 223
Source: MITRE
First published (updated )
CVE-2026-112654

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 77
Severity
8.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 223
Source: MITRE
First published (updated )
CVE-2026-112659

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 29
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 223
Source: MITRE
First published (updated )
CVE-2026-112615

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 57
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to memory corruption.

1 / 223
Source: MITRE
First published (updated )
CVE-2026-112640

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A website may be able to use a media format that should be restricted in Lockdown Mode.

1 / 223
Source: MITRE
First published (updated )
CVE-2026-113952

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 55
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.

1 / 225
Source: MITRE
First published (updated )
CVE-2026-113949

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 66
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to unexpected memory modification.

1 / 214
Source: MITRE
First published (updated )
CVE-2026-113903

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 77
Severity
8.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 215
Source: MITRE
First published (updated )
CVE-2026-112637

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 77
Severity
8.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 227
Source: NVD
First published (updated )
CVE-2026-112626

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 30
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 217
Source: Apple
First published (updated )
CVE-2026-113897

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 229
Source: MITRE
First published (updated )
CVE-2026-112639

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 230
Source: Apple
First published (updated )
CVE-2026-86973

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203