Type Confusion Vulnerability in Safari and Apple Operating Systems
CVE-2026-112673

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112673?

A vulnerability identified in Safari and several Apple operating systems involves a type confusion issue that could potentially lead to unexpected process terminations when processing maliciously crafted web content. The flaw has been addressed with improved state handling, and users are encouraged to update to the latest versions of Safari, iOS, iPadOS, macOS, and visionOS to mitigate risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112673 Data

JSON