PatchGap
WebKit · WebKit

CVE-2026-86974

Logic Error in WebKit
Medium webkit Logic Error

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
ImpactProcessing maliciously crafted web content may lead to memory corruption
DescriptionA type confusion issue was addressed with improved checks.
ComponentWebKit
Bug ClassLogic Error
Tracker321609
CISA KEVNot listed
CreditedHossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
Disclosed2026-10-26

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page