CVE-2026-86897

Medium webkit Logic Error

Overview

Medium

Severity

—

CVSS

Exploited ITW

Embargoed

Fix Status

ImpactAn app may be able to access sensitive user data

DescriptionThis issue was addressed with additional entitlement checks.

ComponentWebKit

Bug ClassLogic Error

CISA KEVNot listed

Disclosed2026-09-14

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.

References

Vendor advisory NVD

On This Page