Out-of-Bounds Read Vulnerability in Apple Safari and iOS Products
CVE-2026-112680
Currently unrated
Key Information:
- Vendor
Apple
- Vendor
- CVE Published:
- 26 October 2026
What is CVE-2026-112680?
An out-of-bounds read vulnerability has been identified that can expose sensitive process memory. This vulnerability may allow attackers leveraging crafted web content to gain access to memory details, posing significant risks to user privacy and security. Apple has addressed this issue in recent updates for various products, ensuring enhanced bounds checking to mitigate the risk of exploitation.
Affected Version(s)
iOS and iPadOS 0 < 26.7.2
iOS and iPadOS 0 < 27.2
macOS 0 < 27.2