A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/149230 | Vendor Advisory |
| https://support.apple.com/en-us/149521 | Vendor Advisory |
| https://support.apple.com/en-us/149524 | Vendor Advisory |
| https://support.apple.com/en-us/149525 | Vendor Advisory |
| https://support.apple.com/en-us/149527 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
03 Nov 2026, 20:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/149230 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149521 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149524 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149525 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149527 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| First Time |
Apple
Apple watchos Apple iphone Os Apple ipados Apple tvos Apple macos Apple safari |
|
| CWE | CWE-416 | |
| CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
26 Oct 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-26 21:17
Updated : 2026-11-04 15:17
NVD link : CVE-2026-112666
Mitre link : CVE-2026-112666
CVE.ORG link : CVE-2026-112666
JSON object : View
Products Affected
apple
- macos
- iphone_os
- watchos
- ipados
- tvos
- safari
CWE
CWE-416
Use After Free