A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/149230 | Vendor Advisory |
| https://support.apple.com/en-us/149521 | Vendor Advisory |
| https://support.apple.com/en-us/149524 | Vendor Advisory |
| https://support.apple.com/en-us/149525 | Vendor Advisory |
| https://support.apple.com/en-us/149527 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
03 Nov 2026, 20:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/149230 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149521 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149524 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149525 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149527 - Vendor Advisory | |
| CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
|
| First Time |
Apple
Apple watchos Apple iphone Os Apple ipados Apple tvos Apple macos Apple safari |
03 Nov 2026, 20:18
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-362 |
26 Oct 2026, 21:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-26 21:18
Updated : 2026-11-03 20:51
NVD link : CVE-2026-112669
Mitre link : CVE-2026-112669
CVE.ORG link : CVE-2026-112669
JSON object : View
Products Affected
apple
- macos
- iphone_os
- watchos
- ipados
- tvos
- safari
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')