Use-After-Free Vulnerability in Apple Safari and Other Products
CVE-2026-112655

8.8HIGH

Key Information:

Vendor

Apple
Status
Safari
iOS And iPad OS
Mac OS
TV OS
Vendor
CVE Published:
26 October 2026

What is CVE-2026-112655?

A use-after-free vulnerability was discovered that affects multiple Apple products, including Safari, iOS, and macOS platforms. This issue arises from improper memory management, allowing attackers to exploit crafted web content. Successful exploitation may enable arbitrary code execution, potentially compromising user devices. Apple has addressed this issue in the latest software updates, emphasizing the importance of keeping systems updated to prevent exploitation.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.