CVE-2026-112626

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-30: 110-30
Full discourse1 post
  • えり|缶ビール片手のAI / ガジェットウォッチャー@eri_ai_lav

    今回いちばん効くのはここ(iOS/iPadOS 27.2・26.7.2): ・WebKit CVE-2026-112697 → 細工されたWebページの処理で任意コード実行 ・WebKit CVE-2026-112655 → 同じく任意コード実行 ・WebKit JavaScript Bindings CVE-2026-112626 → 同じく任意コード実行 ・App Store CVE-2026-112690 → 表示領域の隔離(サンドボックス)からの脱出 リンクを踏む前、開いた時点で成立しうる型です。

    10000120
    61 followersView on X

Explore more