Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2026-86985: Web pages can crash Safari, iOS, macOS, tvOS
CVE-2026-86985 · published 9 days ago
Summary
Apple devices that run Safari, iOS, iPadOS, macOS, or tvOS may unexpectedly stop working when they display specially crafted web pages. The crash interrupts the user but does not leak personal information. Install the latest software updates (Safari 27.2, iOS/iPadOS 26.7.2 or newer, macOS Golden Gate 27.2, tvOS 27.2) to fix the problem.
What to do
- Update apple safari to version 27.2 or later.
- Update apple ios and ipados to version 26.7.2 or later.
- Update apple macos to version 27.2 or later.
- Update apple tvos to version 27.2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | safari | < 27.2 |
| apple | ios and ipados | < 26.7.2 |
| apple | macos | < 27.2 |
| apple | tvos | < 27.2 |
Original advisory text
This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. Processing ma...
This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
6.5
Medium
Type
CWE-20Improper Input Validation
Timeline
Published26 Oct 2026
Updated4 Nov 2026
First seen26 Oct 2026
Track software like this
Free during beta