Use-After-Free Vulnerability in Apple Safari and iOS Products
CVE-2026-112640

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; TV OS
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112640?

A use-after-free vulnerability was discovered in Apple Safari and several iOS products, potentially leading to memory corruption when processing maliciously crafted web content. This issue has been addressed through enhanced memory management in recent software updates across affected platforms, including Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112640 Data

JSON