Use-after-free Vulnerability in Apple iOS, iPadOS, and macOS Products
CVE-2026-113970

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 9 November 2026

What is CVE-2026-113970?

A use-after-free vulnerability has been identified that impacts various Apple products, allowing an attacker in Bluetooth range to corrupt process memory. This issue has been addressed with improved memory management. Users are encouraged to update to the latest versions of iOS, iPadOS, and macOS to mitigate potential risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 18.7.12

iOS and iPadOS 0 < 26.7.3

iOS and iPadOS 0 < 27.2.1

References

https://support.apple.com/en-us/149715

https://support.apple.com/en-us/149716

https://support.apple.com/en-us/149717

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 9, 2026
Vulnerability Reserved
Oct 20, 2026

CVE-2026-113970 Data

JSON