VulnSocial

CVE-2026-112612

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-27: 110-27
Referenced assets1 URL
By indicator
Full discourse1 post
  • 拓跋鼠@qwerty__cs

    iOS 27.2一口气修了163个漏洞，想等越狱的兄弟千万别升级！ 按苹果公告去重统计，共163个CVE，与越狱相关的重点是这几个漏洞： 1.内核写入：Kernel的CVE-2026-112507、112474、84495，以及神经引擎的84494，明确提到App可能写入内核内存。 2.沙盒逃逸：CVE-2026-112690、113897，明确涉及逃出WebContent沙盒。 3.内核内存破坏：CVE-2026-112679、65350等内核UAF，以及IOMobileFrameBuffer的112459、IOSurface的112477竞态漏洞。 4.内存修改＋地址泄露：CVE-2026-112576涉及COW写时复制内存异常修改；112665涉及内核布局泄露，可配合其他漏洞利用。 5.网页代码执行：CVE-2026-112697、112623、112659等，恶意网页可能触发任意代码执行。 6.任意文件读写：CVE-2026-112612，需要物理接触已经建立信任配对的设备。 想等越狱，务必别升27.2！还在27.0.1的兄弟把自动更新关掉，等后续越狱工具利用进展。 https://support.apple.com/en-us/149230

    1260844416.2K
    8.2K followersView on X

Explore more

Back to dashboard