Skip to content

CVE-2026-112690 This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2...

CriticalCVSS 10.0 EPSS 0.99%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. A remote attacker may be able to break out of the WebContent sandbox.

Affected products

ProductAffected versionsFixed in
apple iOS and iPadOS < 26.7.2 26.7.2
apple iOS and iPadOS < 27.2 27.2
apple macos < 15.8.2 15.8.2
apple macos < 26.7.2 26.7.2
apple macos < 27.2 27.2
apple visionOS < 27.2 27.2
apple iPadOS < 26.7.2 26.7.2
apple iPadOS >= 27.0, < 27.2 27.2
apple iphone os < 26.7.2 26.7.2
apple iphone os >= 27.0, < 27.2 27.2
apple macos >= 15.0, < 15.8.2 15.8.2
apple macos >= 26.0, < 26.7.2 26.7.2
apple macos >= 27.0, < 27.2 27.2

References