{"id":"CVE-2026-113897","kind":"vulnerability","aliases":["CVE-2026-113897"],"related":[],"title":"Safari and Apple OS: web content sandbox can be escaped remotely","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.","summary":"A flaw in Safari's Web Content process lets a remote attacker break out of the browser sandbox. Apple fixed it by removing the vulnerable code in Safari 27.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2 and visionOS 27.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","ios","ipados","macos","other","safari","visionos"],"not_affected_if":["patched-27.2-or-later"],"how_to_check":"- Check the Safari version under Safari > About Safari, or run `sw_vers` on macOS to see the OS build\n- On iOS and iPadOS, check Settings > General > About for the version","fix":"- Update Safari to `27.2` or later\n- Update iOS and iPadOS to `27.2` or later\n- Update macOS Golden Gate to `27.2` or later\n- Update visionOS to `27.2` or later","status":"open","published_at":"2026-10-26T21:18:06+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","triaged_at":"2026-10-26T21:23:08+00:00","updated_at":"2026-10-26T21:23:08+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T21:23:08Z","model":"claude-haiku-5-5","output":{"fix":"- Update Safari to `27.2` or later\n- Update iOS and iPadOS to `27.2` or later\n- Update macOS Golden Gate to `27.2` or later\n- Update visionOS to `27.2` or later","reach":"internet","title":"Safari and Apple OS: web content sandbox can be escaped remotely","impact":"high","summary":"A flaw in Safari's Web Content process lets a remote attacker break out of the browser sandbox. Apple fixed it by removing the vulnerable code in Safari 27.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2 and visionOS 27.2.","category":"other","nicknames":[],"who_cares":["safari","ios","ipados","macos","visionos","apple-devices"],"confidence":0.5,"needs_auth":"no","worst_case":"Attacker escapes browser sandbox and reaches the underlying system","analyst_note":"Check Apple's security release notes for the 27.2 updates for severity, CVSS and whether exploitation has been seen.","how_to_check":"- Check the Safari version under Safari > About Safari, or run `sw_vers` on macOS to see the OS build\n- On iOS and iPadOS, check Settings > General > About for the version","needs_analyst":true,"not_affected_if":["patched-27.2-or-later"],"who_is_affected":"Anyone running an Apple browser or OS build older than 27.2 is exposed when they open untrusted web content. The sources do not say which configurations are most at risk. Teams that only run fully patched 27.2 or later builds can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000624,"input_tokens":3287,"output_tokens":590,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113897':14A,17A '-2026':13A,16A '27.2':55B,57B,59B,63B,66B,82C,84C,87C,91C,93C 'abl':99C 'address':70C 'appl':3A,19B,45B 'apple-devic':18B 'attack':38B,96C 'break':39B,101C 'browser':43B 'code':52B,75C 'content':6A,33B,105C 'cve':12A,15A 'devic':20B 'escap':10A 'fix':46B,79C 'flaw':28B 'gate':62B,90C 'golden':61B,89C 'io':21B,56B,83C 'ipado':22B,58B,86C 'issu':68C,77C 'let':35B 'maco':23B,60B,88C 'may':97C 'os':4A 'process':34B 'remot':11A,37B,95C 'remov':49B,72C 'safari':1A,25B,30B,54B,81C 'sandbox':7A,44B,106C 'visiono':26B,65B,92C 'vulner':51B,74C 'web':5A,32B,104C","nicknames":[],"mitigations":[],"who_affected":"Anyone running an Apple browser or OS build older than 27.2 is exposed when they open untrusted web content. The sources do not say which configurations are most at risk. Teams that only run fully patched 27.2 or later builds can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:06+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113897","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113897","severity":null,"published_at":"2026-10-26T21:18:06+00:00","modified_at":"2026-10-26T21:18:06+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","fetched_at":"2026-10-26T21:20:30+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}