{"id":"CVE-2026-113901","kind":"vulnerability","aliases":["CVE-2026-113901"],"related":[],"title":"Safari and Apple OS: use-after-free crash from malicious web content","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.","summary":"A use-after-free memory bug in Safari and several Apple operating systems can be triggered by maliciously crafted web content. The sources say it can crash the browser process, and they do not describe code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","ios","ipados","macos","other","safari","visionos"],"not_affected_if":["unknown"],"how_to_check":"- Check the Safari version under Safari > About Safari, and the OS version under Apple menu > About This Mac or Settings > General > About.\n- unknown","fix":"- Update Safari to `27.2` or later.\n- Update iOS and iPadOS to `27.2` or later, macOS Golden Gate to `27.2` or later, and visionOS to `27.2` or later.","status":"open","published_at":"2026-10-26T21:18:07+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","triaged_at":"2026-10-26T21:22:02+00:00","updated_at":"2026-10-26T21:22:02+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T21:22:02Z","model":"claude-haiku-5-5","output":{"fix":"- Update Safari to `27.2` or later.\n- Update iOS and iPadOS to `27.2` or later, macOS Golden Gate to `27.2` or later, and visionOS to `27.2` or later.","reach":"internet","title":"Safari and Apple OS: use-after-free crash from malicious web content","impact":"low","summary":"A use-after-free memory bug in Safari and several Apple operating systems can be triggered by maliciously crafted web content. The sources say it can crash the browser process, and they do not describe code execution.","category":"other","nicknames":[],"who_cares":["safari","ios","ipados","macos","visionos","apple-devices"],"confidence":0.5,"needs_auth":"no","worst_case":"Browser process crashes when visiting a malicious page","analyst_note":"","how_to_check":"- Check the Safari version under Safari > About Safari, and the OS version under Apple menu > About This Mac or Settings > General > About.\n- unknown","needs_analyst":false,"not_affected_if":["unknown"],"who_is_affected":"Anyone who browses the web with Safari or a device running the listed Apple OS versions is in scope, since the trigger is web content. Teams running fleets of Apple devices should treat it as a routine update. The sources do not say whether third-party browsers or WebKit-based apps are affected.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.000576,"input_tokens":3292,"output_tokens":494,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113901':16A,19A '-2026':15A,18A '27.2':85C,87C,90C,94C,96C 'address':74C 'appl':3A,21B,40B 'apple-devic':20B 'browser':58B 'bug':35B 'code':65B 'content':13A,50B,101C 'craft':48B,99C 'crash':9A,56B,108C 'cve':14A,17A 'describ':64B 'devic':22B 'execut':66B 'fix':82C 'free':8A,33B,71C 'gate':93C 'golden':92C 'improv':76C 'io':23B,86C 'ipado':24B,89C 'issu':72C,80C 'lead':103C 'maco':25B,91C 'malici':11A,47B,98C 'manag':78C 'may':102C 'memori':34B,77C 'oper':41B 'os':4A 'process':59B,97C,107C 'safari':1A,27B,37B,84C 'say':53B 'sever':39B 'sourc':52B 'system':42B 'trigger':45B 'unexpect':106C 'use':6A,31B,69C 'use-after-fre':5A,30B,68C 'visiono':28B,95C 'web':12A,49B,100C","nicknames":[],"mitigations":[],"who_affected":"Anyone who browses the web with Safari or a device running the listed Apple OS versions is in scope, since the trigger is web content. Teams running fleets of Apple devices should treat it as a routine update. The sources do not say whether third-party browsers or WebKit-based apps are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:07+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113901","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113901","severity":null,"published_at":"2026-10-26T21:18:07+00:00","modified_at":"2026-10-26T21:18:07+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","fetched_at":"2026-10-26T21:20:30+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}