{"id":"CVE-2026-112514","kind":"vulnerability","aliases":["CVE-2026-112514"],"related":[],"title":"Apple iOS and macOS: use-after-free can crash the system or corrupt kernel memory","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or corrupt kernel memory.","summary":"A use-after-free flaw in Apple's operating systems can be triggered to terminate the system unexpectedly or corrupt kernel memory. Apple says an attacker may be able to cause the crash or the memory corruption.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","ios","ipados","macos","tvos","visionos","watchos"],"not_affected_if":[],"how_to_check":"- Check the device OS version under Settings > General > About (iOS, iPadOS) or `sw_vers` on macOS and compare it with the fixed versions.\n- unknown for any other check; the sources do not give a specific file or setting to inspect.","fix":"- Update iOS and iPadOS to `26.7.2` or `27.2` or later.\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`.\n- Update tvOS, visionOS and watchOS to `27.2`.","status":"open","published_at":"2026-10-26T21:17:43+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:29:35+00:00","updated_at":"2026-10-26T21:29:35+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:29:35Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2` or `27.2` or later.\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`.\n- Update tvOS, visionOS and watchOS to `27.2`.","reach":"unknown","title":"Apple iOS and macOS: use-after-free can crash the system or corrupt kernel memory","impact":"high","summary":"A use-after-free flaw in Apple's operating systems can be triggered to terminate the system unexpectedly or corrupt kernel memory. Apple says an attacker may be able to cause the crash or the memory corruption.","category":"infrastructure","nicknames":[],"who_cares":["ios","ipados","macos","tvos","visionos","watchos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker crashes the system or corrupts kernel memory on the device.","analyst_note":"Check Apple's security release notes for the attack vector, the affected component and whether a trigger requires local access or user interaction; the NVD entry alone does not say.","how_to_check":"- Check the device OS version under Settings > General > About (iOS, iPadOS) or `sw_vers` on macOS and compare it with the fixed versions.\n- unknown for any other check; the sources do not give a specific file or setting to inspect.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Any Apple device running the listed versions of iOS, iPadOS, macOS, tvOS, visionOS or watchOS is affected. The sources do not say which device models, configurations or features make the flaw reachable, so unknown for narrowing the exposure.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000658,"input_tokens":3358,"output_tokens":644,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112514':19A,22A '-2026':18A,21A '15.8.2':104C '26.7.2':89C,92C,107C '27.2':94C,97C,101C,109C,111C,113C 'abl':62B,118C 'address':78C 'appl':1A,24B,40B,56B 'apple-devic':23B 'attack':59B,115C 'caus':64B,120C 'corrupt':14A,53B,70B,125C 'crash':10A,66B 'cve':17A,20A 'devic':25B 'fix':86C 'flaw':38B 'free':8A,37B,75C 'gate':100C 'golden':99C 'improv':80C 'infrastructur':26B 'io':2A,27B,88C,93C 'ipado':28B,91C,96C 'issu':76C,84C 'kernel':15A,54B,126C 'maco':4A,29B,98C,102C,105C 'manag':82C 'may':60B,116C 'memori':16A,55B,69B,81C,127C 'oper':42B 'say':57B 'sequoia':103C 'system':12A,43B,50B,122C 'taho':106C 'termin':48B,123C 'trigger':46B 'tvos':30B,108C 'unexpect':51B,121C 'use':6A,35B,73C 'use-after-fre':5A,34B,72C 'visiono':31B,110C 'watcho':32B,112C","nicknames":[],"mitigations":[],"who_affected":"Any Apple device running the listed versions of iOS, iPadOS, macOS, tvOS, visionOS or watchOS is affected. The sources do not say which device models, configurations or features make the flaw reachable, so unknown for narrowing the exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112514","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112514","severity":null,"published_at":"2026-10-26T21:17:43+00:00","modified_at":"2026-10-26T21:17:43+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}