Web Content Processing Vulnerability in Safari and Apple Operating Systems
CVE-2026-112684

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; TV OS
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112684?

This vulnerability allows maliciously crafted web content to cause unexpected crashes in Safari and various Apple operating systems. It has been addressed with improved state management and is mitigated in the latest versions of Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112684 Data

JSON