ZDI-26-057
HIGH 8.8
Published
Feb 03, 2026
Apple Safari JavaScriptCore FTL New Array Materialization Type Confusion Remote Code Execution Vulnerability
Apple
Apple Safari contains a remote code execution vulnerability (CVE-2025-46298) that allows attackers to execute arbitrary code on affected systems when users visit malicious websites or open malicious files. The vulnerability carries a high CVSS score of 8.8, indicating significant risk. Security teams should prioritize patching Safari installations and educate users to avoid suspicious web content and files until updates are available.