This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.
| CVE | CVE-2026-113897 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 10.0 / 10 |
| EPSS | 0.8% en 30 días (percentil 56) |
| CWE | CWE-693 |
| Relevancia | 🇨🇱 CSIRT Nacional de Chile lo marcó como crítico |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
apple/ipadosapple/iphone_osapple/macosapple/safariapple/visionos