CVE-2026-112637(apple / ipados)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ipados
  • iphone_os
  • macos
  • safari

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
ipadosiphone_osmacossafaritvosvisionoswatchos

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-04: 111-04
Full discourse1 post
  • 🅾🅼🅰🅼🅾🆁🅸@oMaMoriTTV

    🚨 Apple ! High severity use after free and memory corruption flaws (CVE-2026-112637) continue to prove that browser renderers remain ground zero for remote code execution. WebKit powers every browser engine forced on iOS, a single malicious link can bypass sandbox boundaries. https://t.co/zbD4wjfoEA

    00010117
    288 followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
OSappleipados---
OSappleiphone_os---
OSapplemacos---
Appapplesafari---
OSappletvos---
OSapplevisionos---
OSapplewatchos---

Explore more