CVE-2026-86973 is an out-of-bounds read vulnerability in Safari and related Apple operating systems that was fixed by improved bounds checking. The flaw could cause an unexpected process crash when processing maliciously crafted web content. The issue is resolved in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, and macOS Golden Gate 27.2.