Out-of-Bounds Read Vulnerability in Apple Safari and iOS Products
CVE-2026-112680

Currently unrated

Key Information:

Vendor

Apple

Vendor
CVE Published:
26 October 2026

What is CVE-2026-112680?

An out-of-bounds read vulnerability has been identified that can expose sensitive process memory. This vulnerability may allow attackers leveraging crafted web content to gain access to memory details, posing significant risks to user privacy and security. Apple has addressed this issue in recent updates for various products, ensuring enhanced bounds checking to mitigate the risk of exploitation.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.