CVE-2026-112669
Received Received - Intake

Race Condition in Safari and iOS 27.2

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: Apple Inc.

Description
A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-27
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-112669
EUVD
EUVD-2026-110294

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Apple Safari 0
Apple iOS and iPadOS 0
Apple macOS 0
Apple tvOS 0
Apple watchOS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a race condition in Apple's software, including Safari, iOS, iPadOS, macOS, tvOS, and watchOS. A race condition occurs when a system tries to perform two or more operations at the same time, but the operations must be done in the correct order to work properly. This flaw could allow malicious web content to cause an unexpected crash of the Safari browser.

Detection Guidance

This vulnerability is specific to Apple software versions. Detection involves checking installed versions of Safari, iOS, iPadOS, macOS, tvOS, or watchOS against the fixed versions (27.2 or later). No direct commands are provided in the context to detect the race condition itself.

Impact Analysis

If you use any of the affected Apple products, this vulnerability could cause Safari to crash when you visit a specially crafted malicious website. This might lead to temporary disruption of service or loss of unsaved data in the browser.

Mitigation Strategies

Update affected Apple software to the latest versions (Safari 27.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2) to address the race condition. Avoid processing untrusted web content until updates are applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112669. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart