Out-of-Bounds Write Vulnerability in Apple iOS, iPadOS, and macOS Products
CVE-2026-112470

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112470?

An out-of-bounds write vulnerability in Apple’s iOS, iPadOS, and macOS products could allow an application to manipulate memory beyond intended boundaries. This flaw poses risks of unexpected system termination or corruption of kernel memory, leading to potential instability. Apple has addressed this vulnerability with enhanced bounds checking in the latest software updates for affected products.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 15.8.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112470 Data

JSON