Use-After-Free Vulnerability in Safari and iOS Products by Apple
CVE-2026-113904

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; TV OS
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-113904?

This vulnerability involves a use-after-free condition in Apple’s Safari and various iOS-based products. It can occur when processing specially crafted web content, which may result in an unexpected crash of the affected application. Apple has implemented improved memory management to mitigate the impact of this issue in updated versions of Safari, iOS, iPadOS, macOS Golden Gate, tvOS, visionOS, and watchOS.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113904 Data

JSON