← CVE Radar
CVE-2026-112640
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
7.6 HIGHEPSS 0.37%Not in KEVNVD: Modified
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.6 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L |
Details
- CVE ID
- CVE-2026-112640
- Status
- Modified
- Assigner (CNA)
- apple
- Published
- Oct 26, 2026
- Last modified
- 2026-11-04 16:17 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
AppleSafari1 version range
- before 27.2
AppleiOS and iPadOS2 version ranges
- before 26.7.2
- before 27.2
ApplemacOS1 version range
- before 27.2
AppletvOS1 version range
- before 27.2
ApplevisionOS1 version range
- before 27.2
ApplewatchOS1 version range
- before 27.2
References
- support.apple.com https://support.apple.com/en-us/149227
- support.apple.com https://support.apple.com/en-us/149230
- support.apple.com https://support.apple.com/en-us/149521
- support.apple.com https://support.apple.com/en-us/149524
- support.apple.com https://support.apple.com/en-us/149525
- support.apple.com https://support.apple.com/en-us/149526
- support.apple.com https://support.apple.com/en-us/149527