Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-113949

A type confusion issue was addressed with improved state management

Risk score
60/100
CVSS
8.8 v3.1
Exploit chance (30 days)
0.2%
Published
26 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
Affected
Apple Safari
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Story map

Story map: Apple SafariTHE FLAWSTHE FIXCVE-2026-113949A type confusion issue wasaddressed with improved statemanagementCVSS 8.8 · EPSS 0%CVE-2026-112655Use-after-free can lead toremote code executionCVSS 8.8 · EPSS 1%CVE-2026-112626Use-after-free can lead toremote code executionCVSS 8.8 · EPSS 1%CVE-2026-112659Remote code executionCVSS 8.8 · EPSS 1%FixCheck the linked advisory forthe concrete fixWho is exposed{'products': ['Safari', 'iOS','iPadOS', 'macOS Golden Gate','tvOS', 'visionOS', 'watchOS'],'versions': ['27.2', '26.7.2']}AMBER · PATCH THIS WEEKApple SafariA use-after-free issue wasaddressed with improvedmemory management. Anattacker could executearbitrary code by processingmaliciously crafted web content.Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-843 (CWE-843)76 other warnings in 30 days →Same productEarlier Apple Safari warnings8 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Apple Safari: Amber, patch this week. A use-after-free issue was addressed with improved memory management. An attacker could execute arbitrary code by processing maliciously crafted web content.

The flaws

  • CVE-2026-113949: A type confusion issue was addressed with improved state management (CVSS 8.8 · EPSS 0%)
  • CVE-2026-112655: Use-after-free can lead to remote code execution (CVSS 8.8 · EPSS 1%)
  • CVE-2026-112626: Use-after-free can lead to remote code execution (CVSS 8.8 · EPSS 1%)
  • CVE-2026-112659: Remote code execution (CVSS 8.8 · EPSS 1%)

The fix

Fix: Check the linked advisory for the concrete fix

Who is exposed: {'products': ['Safari', 'iOS', 'iPadOS', 'macOS Golden Gate', 'tvOS', 'visionOS', 'watchOS'], 'versions': ['27.2', '26.7.2']}

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 8.8 high
  • Remotely exploitable without logging in

References

Original description

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.

Last activity 26 Oct 2026. Patch Forecast updates every hour.