Use-After-Free Vulnerability in Safari and Apple Operating Systems
CVE-2026-112653

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112653?

A use-after-free vulnerability was identified in Apple's Safari browser and several operating systems, including iOS and macOS. This flaw occurs due to improper memory management, which may allow an attacker to craft malicious web content that could lead to unexpected termination of the process. To mitigate this risk, users are encouraged to update to the latest available versions of Safari and their operating systems.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112653 Data

JSON