Advisory · Apple

CVE-2026-112476

A kernel issue, fixed by Apple on 26 October 2026 across iOS, iPadOS, macOS, tvOS, watchOS and visionOS.

Vendor advisory

What Apple published.

Quoted from Apple's security notes. This page says nothing beyond them. The technical write-up is coming soon, as a separate page.

Component: Kernel
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds checking.

Credited to Arnold Cartagena in Apple's advisory, which lists the full credit line.

Fixed in

Each release below lists this issue in its security notes. Install the update for your device.

iOS 27.2 and iPadOS 27.2iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and laterSecurity notes for iOS 27.2 and iPadOS 27.2
iOS 26.7.2 and iPadOS 26.7.2iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and laterSecurity notes for iOS 26.7.2 and iPadOS 26.7.2
macOS Golden Gate 27.2macOS Golden GateSecurity notes for macOS Golden Gate 27.2
macOS Tahoe 26.7.2macOS TahoeSecurity notes for macOS Tahoe 26.7.2
macOS Sequoia 15.8.2macOS SequoiaSecurity notes for macOS Sequoia 15.8.2
tvOS 27.2Apple TV 4K 2nd generation and laterSecurity notes for tvOS 27.2
watchOS 27.2Apple Watch Series 9 and laterSecurity notes for watchOS 27.2
visionOS 27.2Apple Vision Pro (all models)Security notes for visionOS 27.2

Timeline