CVE-2026-86872: apple safari, apple visionos, apple watchos

CVSS 5.4 (medium) · published 2026-10-20

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.

Affected products (NVD): apple safari, apple visionos, apple watchos

Fixed in (NVD): 27.0

Weakness: CWE-843

Source: NVD CVE-2026-86872

References

• https://support.apple.com/en-us/149037
• https://support.apple.com/en-us/149038
• https://support.apple.com/en-us/149039

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.