Type Confusion Issue in Apple Safari, iOS, iPadOS and macOS
CVE-2026-113949

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-113949?

A type confusion issue has been identified in Safari and various Apple operating systems, leading to potential memory corruption when processing maliciously crafted web content. The vulnerability has been addressed with improved state management. Users are encouraged to update to the latest software versions to mitigate any risk associated with this issue.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113949 Data

JSON