CVE-2026-113897 — Vulnerability intelligence

apple — safari

Published: 2026-10-26T20:33:12.644Z

CVSS

10

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.

Sources

• CVE-2026-113897
• Vendor Advisory
• Vendor Advisory
• Vendor Advisory
• Vendor Advisory
• CVE-2026-113897