Use-After-Free Vulnerability in Apple Safari and iOS Products
CVE-2026-112695

Currently unrated

Key Information:

Vendor

Apple
Status
Safari
iOS And iPad OS
Mac OS
Visionos
Vendor
CVE Published:
26 October 2026

What is CVE-2026-112695?

A use-after-free vulnerability has been identified in Apple’s Safari browser and various iOS and macOS products. This flaw arises from improper memory management, which could allow processing of maliciously crafted web content to result in unexpected process termination. Users are encouraged to update their devices to the latest versions, as Apple has implemented fixes in Safari 27.2, iOS 26.7.2, iPadOS 26.7.2, and further updated versions to mitigate the risk associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.