Live › vulnerability › CVE-2026-112682
Go to dashboardAn input validation flaw in several Apple operating systems can be triggered remotely to terminate an app unexpectedly. The sources say the impact is an app crash, not code execution or data access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Apple devices running the listed pre-fix builds are affected. The sources do not name the specific component or input path, so it is unknown whether managed or server-side setups differ.
No product ranges from the sources yet.
sw_vers on macOS and compare with the fixed versions.26.7.2 or 27.2, macOS Tahoe to 26.7.2, macOS Golden Gate to 27.2, visionOS and watchOS to 27.2.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. A remote attacker may be able to cause unexpected app termination.
This page as .md · .json · in your agent: get_signal("CVE-2026-112682")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.