CVE-2026-86974

Name of the Vulnerable Software and Affected Versions Safari versions prior to 27.2 iOS versions prior to 27.2 iPadOS versions prior to 27.2 macOS Golden Gate versions prior to 27.2 visionOS versions prior to 27.2

Description A type confusion issue exists in the jsToWasm IC Entrypoint. Processing maliciously crafted web content can lead to memory corruption and remote code execution. Type confusion occurs when a program accesses a resource using a type that is different from the type the resource was originally defined with.

Recommendations Update Safari to version 27.2. Update iOS to version 27.2. Update iPadOS to version 27.2. Update macOS Golden Gate to version 27.2. Update visionOS to version 27.2.