Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2026-112684

Quick assessment

Affected
Apple Safari
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

该问题已通过改进状态管理得到修复。此问题已在以下版本中修复:Safari 27.2、iOS 26.7.2、iPadOS 26.7.2、iOS 27.2、iPadOS 27.2、macOS Golden Gate 27.2、tvOS 27.2、visionOS 27.2 和 watchOS 27.2。处理恶意构造的 Web 内容可能导致进程意外崩溃。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.19% · P9

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 7

VendorProduct Version RangeStatus
Apple iOS and iPadOS < 26.7.2 affected
< 27.2 affected
Apple macOS < 27.2 affected
Apple Safari < 27.2 affected
Apple tvOS < 27.2 affected
Apple visionOS < 27.2 affected
Apple watchOS < 27.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112684

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
This issue was addressed through improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Apple Safari 0 ~ 27.2 -
Apple iOS and iPadOS 0 ~ 26.7.2 -
Apple macOS 0 ~ 27.2 -
Apple tvOS 0 ~ 27.2 -
Apple visionOS 0 ~ 27.2 -
Apple watchOS 0 ~ 27.2 -

II. Public POCs for CVE-2026-112684

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112684

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-112684 (2)

Same Patch Batch · Apple · 2026-10-26 · 324 CVEs total

CVE-2026-112701 iOS/iPadOS 26.7.2 和 27.2 授权漏洞
CVE-2026-112629 iOS/macOS 越界读取漏洞修复
CVE-2026-112500 iOS 27.2 等系统 Hide My Email 逻辑漏洞致邮箱泄露
CVE-2026-112691 iOS 26.7.2 等越界写入漏洞
CVE-2026-112557 macOS 多版本隐私偏好设置绕过漏洞
CVE-2026-112668 macOS 多版本逻辑漏洞可提权至 root
CVE-2026-112687 iOS/iPadOS/tvOS 27.2 远程内存损坏漏洞
CVE-2026-112541 macOS 15.8.2 等版本目录解析提权漏洞
CVE-2026-112453 macOS 多版本沙箱逃逸漏洞
CVE-2026-112516 iOS 等系统存在释放后使用漏洞
CVE-2026-84634 iOS 27 等系统竞态条件漏洞可致系统终止
CVE-2026-112486 iOS 26.7.2 及 macOS 3D 模型越界写漏洞
CVE-2026-86920 iOS/macOS/visionOS 授权绕过漏洞
CVE-2026-113940 macOS Golden Gate 27.2 越界读取漏洞
CVE-2026-112652 iOS/macOS 等逻辑漏洞致证书验证绕过
CVE-2026-112469 iOS 26.7.2 等越界写漏洞修复
CVE-2026-65363 iOS/macOS 越狱:应用可突破沙盒限制
CVE-2026-86936 macOS 多版本逻辑漏洞可提权至 root
CVE-2026-112428 macOS 逻辑漏洞:应用可绕过 Gatekeeper
CVE-2026-112432 iOS 27.2 等系统日志敏感数据泄露

Showing top 20 of 324 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities