CVE-2026-112652
Quick assessment
Affected
Apple iOS and iPadOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
已通过改进状态管理机制修复了一个逻辑问题。该问题已在以下版本中修复：iOS 26.7.2、iPadOS 26.7.2、iOS 27.2、iPadOS 27.2、macOS Golden Gate 27.2、macOS Sequoia 15.8.2、macOS Tahoe 26.7.2 以及 visionOS 27.2。恶意应用可能借此绕过证书验证。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112652
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An malicious app may be able to bypass certificate validation.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-112652
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112652
请登录查看更多情报信息。
Same Patch Batch · Apple · 2026-10-26 · 324 CVEs total
| CVE-2026-112701 | iOS/iPadOS 26.7.2 和 27.2 授权漏洞 | |
| CVE-2026-112629 | iOS/macOS 越界读取漏洞修复 | |
| CVE-2026-112500 | iOS 27.2 等系统 Hide My Email 逻辑漏洞致邮箱泄露 | |
| CVE-2026-112691 | iOS 26.7.2 等越界写入漏洞 | |
| CVE-2026-112557 | macOS 多版本隐私偏好设置绕过漏洞 | |
| CVE-2026-112668 | macOS 多版本逻辑漏洞可提权至 root | |
| CVE-2026-112687 | iOS/iPadOS/tvOS 27.2 远程内存损坏漏洞 | |
| CVE-2026-112541 | macOS 15.8.2 等版本目录解析提权漏洞 | |
| CVE-2026-112453 | macOS 多版本沙箱逃逸漏洞 | |
| CVE-2026-112516 | iOS 等系统存在释放后使用漏洞 | |
| CVE-2026-84634 | iOS 27 等系统竞态条件漏洞可致系统终止 | |
| CVE-2026-112486 | iOS 26.7.2 及 macOS 3D 模型越界写漏洞 | |
| CVE-2026-112595 | iOS 27.2 等系统 Thread 网络认证绕过漏洞 | |
| CVE-2026-86920 | iOS/macOS/visionOS 授权绕过漏洞 | |
| CVE-2026-113940 | macOS Golden Gate 27.2 越界读取漏洞 | |
| CVE-2026-112469 | iOS 26.7.2 等越界写漏洞修复 | |
| CVE-2026-65363 | iOS/macOS 越狱：应用可突破沙盒限制 | |
| CVE-2026-86936 | macOS 多版本逻辑漏洞可提权至 root | |
| CVE-2026-112428 | macOS 逻辑漏洞：应用可绕过 Gatekeeper | |
| CVE-2026-112432 | iOS 27.2 等系统日志敏感数据泄露 |
Showing top 20 of 324 CVEs. View all on vendor page → →