CVE-2026-112637

Published 26 October 2026 · tracked since 27 October 2026

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-112646 MEDIUM 6.5
• CVE-2026-112651 HIGH 8.8
• CVE-2026-112634 MEDIUM 6.5
• CVE-2026-112629 MEDIUM 6.5
• CVE-2026-112633 MEDIUM 6.5
• CVE-2026-112623 HIGH 8.8
• CVE-2026-112626 HIGH 8.8
• CVE-2026-112614 MEDIUM 6.5
• CVE-2026-112485
• CVE-2026-112486

→ Open the live CVE board · all tools