ZDI-26-057 HIGH 8.8 Published Feb 03, 2026

Apple Safari JavaScriptCore FTL New Array Materialization Type Confusion Remote Code Execution Vulnerability

Apple

Apple Safari contains a remote code execution vulnerability (CVE-2025-46298) that allows attackers to execute arbitrary code on affected systems when users visit malicious websites or open malicious files. The vulnerability carries a high CVSS score of 8.8, indicating significant risk. Security teams should prioritize patching Safari installations and educate users to avoid suspicious web content and files until updates are available.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy