Use-After-Free Vulnerability in Apple Safari and iOS Products
CVE-2026-112666

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; TV OS
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112666?

A use-after-free vulnerability has been identified in Safari and various Apple operating systems, where improper memory management could be exploited by maliciously crafted web content. This flaw may lead to unexpected process termination, compromising the security and stability of the affected environments. Apple has addressed this issue in the updates for Safari, iOS, iPadOS, macOS Golden Gate, tvOS, and watchOS. Users are strongly encouraged to update their devices to the latest versions to mitigate potential risks.

Affected Version(s)

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

Safari 0 < 27.2

References

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

https://support.apple.com/en-us/149524

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112666 Data

JSON