Logic Issue in Safari and iOS Products by Apple
CVE-2026-113952

Currently unrated

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-113952?

A logic issue was identified in Safari and various Apple operating systems that may allow a website to bypass media format restrictions while in Lockdown Mode. This vulnerability has been addressed with enhanced checks in the latest software updates, thereby reinforcing user security and preventing unauthorized media access under protected circumstances.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113952 Data

JSON