Out-of-Bounds Read Vulnerability in Safari and Apple Products
CVE-2026-112699

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112699?

An out-of-bounds read vulnerability has been identified in Apple's Safari browser and related operating systems, which could allow an attacker to access sensitive process memory through maliciously crafted web content. This issue has been rectified in the latest versions of Safari, iOS, iPadOS, macOS Golden Gate, and visionOS, highlighting the importance of keeping software up to date for enhanced security and privacy.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112699 Data

JSON