Apple
iOS 27.2 and iPadOS 27.2
149230 Oct 26, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149230. 163 CVE entries, 24 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149230
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
339 lines
Showing 251–300 of 339 , page 6 of 7
CVE-2026-112479
BR2026-0000-033512
USB
unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-112479
BR2026-0000-033513
USB
unclaimed
A malicious USB device may be able to cause unexpected system termination or read kernel memory
Credited as Song nuri
CVE-2026-113904
BR2026-0000-033514
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Lily Cohl (@GenericCoding)
CVE-2026-113904
BR2026-0000-033515
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Do Young Park (adawn)
CVE-2026-113904
BR2026-0000-033516
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as MYUNGYONG LEE
CVE-2026-113904
BR2026-0000-033517
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Luke Francis (@lukefr09)
CVE-2026-113904
BR2026-0000-033518
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Shubham Chaskar
CVE-2026-113904
BR2026-0000-033519
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong
CVE-2026-113904
BR2026-0000-033520
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-112599
BR2026-0000-033521
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Avinash Kumar Thapa
CVE-2026-112599
BR2026-0000-033522
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Jay Kaushik Patel
CVE-2026-86974
BR2026-0000-033523
WebKit
unclaimed
Processing maliciously crafted web content may lead to memory corruption
Credited as Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
CVE-2026-112693
BR2026-0000-033524
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as 은태 장
CVE-2026-86985
BR2026-0000-033525
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Pasquale Scola
CVE-2026-112680
BR2026-0000-033526
WebKit
unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Franz Bettag
CVE-2026-112680
BR2026-0000-033527
WebKit
unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Kwak Kiyong
CVE-2026-112680
BR2026-0000-033528
WebKit
unclaimed
Processing maliciously crafted web content may result in the disclosure of process memory
Credited as Song Nuri
CVE-2026-112697
BR2026-0000-033529
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-112697
BR2026-0000-033530
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as 은태 장
CVE-2026-112655
BR2026-0000-033531
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112651
BR2026-0000-033532
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112623
BR2026-0000-033533
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as pwn2addr
CVE-2026-112623
BR2026-0000-033534
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112684
BR2026-0000-033535
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Gia Bui (@yabeow) from Calif.io
CVE-2026-112673
BR2026-0000-033536
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Myungyong Lee
CVE-2026-112669
BR2026-0000-033537
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected Safari crash
Credited as remanone (@remanone_)
CVE-2026-112695
BR2026-0000-033538
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Josef Korbel (Citadelo)
CVE-2026-112695
BR2026-0000-033539
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Luke Francis (@lukefr09)
CVE-2026-112666
BR2026-0000-033540
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Luke Francis (@lukefr09)
CVE-2026-112654
BR2026-0000-033541
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Charles Kern
CVE-2026-112653
BR2026-0000-033542
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Malik M. (@m411k_)
CVE-2026-112615
BR2026-0000-033543
WebKit
unclaimed
Processing maliciously crafted web content may lead to an unexpected process termination
Credited as Chris Rohlf with Anthropic Research
CVE-2026-112659
BR2026-0000-033544
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-112659
BR2026-0000-033545
WebKit
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Chris Rohlf with Anthropic Research
CVE-2026-113952
BR2026-0000-033546
WebKit
unclaimed
A website may be able to use a media format that should be restricted in Lockdown Mode
Credited as Drinor Selmanaj (Sentry)
CVE-2026-113903
BR2026-0000-033547
WebKit
unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as Eddy Tsalolikhin
CVE-2026-113903
BR2026-0000-033548
WebKit
unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as OpenAI Codex Security - Amy Burnett
CVE-2026-113903
BR2026-0000-033549
WebKit
unclaimed
Processing maliciously crafted web content may lead to unexpected memory modification
Credited as Lily Cohl (@GenericCoding)
CVE-2026-112637
BR2026-0000-033550
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Chris Rohlf with Anthropic Research
CVE-2026-112637
BR2026-0000-033551
WebKit Canvas
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as 은태 장
CVE-2026-112626
BR2026-0000-033552
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Euntae Jang
CVE-2026-112626
BR2026-0000-033553
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Luke Francis (@lukefr09)
CVE-2026-112626
BR2026-0000-033554
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Shubham Chaskar
CVE-2026-112626
BR2026-0000-033555
WebKit JavaScript Bindings
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Josef Korbel (Citadelo)
CVE-2026-113897
BR2026-0000-033556
WebKit Process Model
unclaimed
A remote attacker may be able to break out of Web Content sandbox
Credited as Luke Francis
CVE-2026-113897
BR2026-0000-033557
WebKit Process Model
unclaimed
A remote attacker may be able to break out of Web Content sandbox
Credited as Jackson Kuja
CVE-2026-112639
BR2026-0000-033558
WebKit Process Model
unclaimed
Processing maliciously crafted web content may lead to arbitrary code execution
Credited as Luke Francis (@lukefr09)
CVE-2026-113901
BR2026-0000-033559
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Kwak Kiyong (@Pwnkai23)
CVE-2026-113901
BR2026-0000-033560
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Song Nuri
CVE-2026-86973
BR2026-0000-033561
WebRTC
unclaimed
Processing maliciously crafted web content may lead to an unexpected process crash
Credited as Narendra Singh (@_3P1C)