Use-After-Free Vulnerability in Apple Safari and Related Products
CVE-2026-112626

8.8HIGH

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; TV OS
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112626?

A use-after-free vulnerability has been identified in Apple's Safari and associated operating systems which could be exploited through maliciously crafted web content. This issue may lead to arbitrary code execution, compromising user data and system integrity. Apple has provided patches in the latest versions of Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS to address this significant security concern.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112626 Data

JSON