VulnSocial

CVE-2026-112690

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. A remote attacker may be able to break out of the WebContent sandbox.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-27: 110-27
Referenced assets1 URL
By indicator
Full discourse1 post
  • 拓跋鼠@qwerty__cs

    iOS 27.2一口气修了163个漏洞，想等越狱的兄弟千万别升级！ 按苹果公告去重统计，共163个CVE，与越狱相关的重点是这几个漏洞： 1.内核写入：Kernel的CVE-2026-112507、112474、84495，以及神经引擎的84494，明确提到App可能写入内核内存。 2.沙盒逃逸：CVE-2026-112690、113897，明确涉及逃出WebContent沙盒。 3.内核内存破坏：CVE-2026-112679、65350等内核UAF，以及IOMobileFrameBuffer的112459、IOSurface的112477竞态漏洞。 4.内存修改＋地址泄露：CVE-2026-112576涉及COW写时复制内存异常修改；112665涉及内核布局泄露，可配合其他漏洞利用。 5.网页代码执行：CVE-2026-112697、112623、112659等，恶意网页可能触发任意代码执行。 6.任意文件读写：CVE-2026-112612，需要物理接触已经建立信任配对的设备。 想等越狱，务必别升27.2！还在27.0.1的兄弟把自动更新关掉，等后续越狱工具利用进展。 https://support.apple.com/en-us/149230

    1260844416.2K
    8.2K followersView on X

Explore more

Back to dashboard