Use-After-Free Vulnerability in Safari, iOS, and macOS by Apple
CVE-2026-113901

Currently unrated

Key Information:

Vendor

Apple
Status
Safari
iOS And iPad OS
Mac OS
Visionos
Vendor
CVE Published:
26 October 2026

What is CVE-2026-113901?

A use-after-free vulnerability was identified in Apple's Safari browser and associated operating systems, potentially allowing attackers to manipulate memory and crash processes. This flaw arises when web content is not properly managed, leading to possible exploitation through maliciously crafted input. Apple has released updates in version 27.2 of Safari, iOS, iPadOS, macOS Golden Gate, and visionOS to enhance memory management and address this security concern.

Affected Version(s)

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

Safari 0 < 27.2

References

https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149526

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.