CVE-2026-113901
Quick assessment
Affected
Apple Safari
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
通过改进内存管理，已修复一处释放后使用（use-after-free）漏洞。该漏洞已在 Safari 27.2、iOS 27.2、iPadOS 27.2、macOS Golden Gate 27.2 以及 visionOS 27.2 中修复。处理恶意构造的网页内容可能导致进程意外崩溃。
Possible ATT&CK Techniques 2 AI
T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-113901
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-113901
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-113901
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-113901 (1)
Same Patch Batch · Apple · 2026-10-26 · 324 CVEs total
| CVE-2026-112701 | iOS/iPadOS 26.7.2 和 27.2 授权漏洞 | |
| CVE-2026-112629 | iOS/macOS 越界读取漏洞修复 | |
| CVE-2026-112500 | iOS 27.2 等系统 Hide My Email 逻辑漏洞致邮箱泄露 | |
| CVE-2026-112691 | iOS 26.7.2 等越界写入漏洞 | |
| CVE-2026-112557 | macOS 多版本隐私偏好设置绕过漏洞 | |
| CVE-2026-112668 | macOS 多版本逻辑漏洞可提权至 root | |
| CVE-2026-112687 | iOS/iPadOS/tvOS 27.2 远程内存损坏漏洞 | |
| CVE-2026-112541 | macOS 15.8.2 等版本目录解析提权漏洞 | |
| CVE-2026-112453 | macOS 多版本沙箱逃逸漏洞 | |
| CVE-2026-112516 | iOS 等系统存在释放后使用漏洞 | |
| CVE-2026-84634 | iOS 27 等系统竞态条件漏洞可致系统终止 | |
| CVE-2026-112469 | iOS 26.7.2 等越界写漏洞修复 | |
| CVE-2026-112595 | iOS 27.2 等系统 Thread 网络认证绕过漏洞 | |
| CVE-2026-86920 | iOS/macOS/visionOS 授权绕过漏洞 | |
| CVE-2026-113940 | macOS Golden Gate 27.2 越界读取漏洞 | |
| CVE-2026-112652 | iOS/macOS 等逻辑漏洞致证书验证绕过 | |
| CVE-2026-65363 | iOS/macOS 越狱：应用可突破沙盒限制 | |
| CVE-2026-86936 | macOS 多版本逻辑漏洞可提权至 root | |
| CVE-2026-112428 | macOS 逻辑漏洞：应用可绕过 Gatekeeper | |
| CVE-2026-112432 | iOS 27.2 等系统日志敏感数据泄露 |
Showing top 20 of 324 CVEs. View all on vendor page → →