Use-After-Free Vulnerability in Apple Safari and iOS Products
CVE-2026-113903

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-113903?

This vulnerability manifests as a use-after-free issue, where improper memory management could allow processing of maliciously crafted web content, potentially leading to unexpected memory modification. Affected users are encouraged to update to the latest versions of Safari, iOS, iPadOS, macOS Golden Gate, and visionOS to mitigate this risk.

Affected Version(s)

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

Safari 0 < 27.2

References

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

https://support.apple.com/en-us/149526

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113903 Data

JSON