CVE-2026-84495
Apple Ipados: use-after-free
- Risk score
- 50/100
- CVSS
- 7.8 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or wri…
- Affected
- Apple Ipados
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Apple Ipados: Amber, patch this week. A memory corruption issue was addressed with improved memory handling. An attacker could cause an unexpected app termination or arbitrary code execution by parsing a file.
The flaws
- CVE-2026-84495: Use-after-free (CVSS 7.8 · EPSS 0%)
- CVE-2026-112688: Memory corruption can lead to remote code execution (CVSS 8.8 · EPSS 1%)
- CVE-2026-64759: Integer overflow can lead to remote code execution (CVSS 8.8 · EPSS 0%)
- CVE-2026-113912: Out-of-bounds read (CVSS 7.1 · EPSS 0%)
The fix
Fix: Check the linked advisory for the concrete fix, as it is not specified in the record.
Who is exposed: {'products': ['iOS', 'iPadOS', 'macOS Golden Gate', 'macOS Sequoia', 'macOS Tahoe'], 'packages': [], 'versions': ['iOS 26.7', 'iPadOS 26.7', 'iOS 27.2', 'iPadOS 27.2', 'macOS Golden Gate 27.2', 'macOS Sequoia 15.8.2', 'macOS Tahoe 26.7.2']}
Where it stands
- No known exploitation
Connects to
- Same weakness: Use-after-free (CWE-416). 400 other warnings in 30 days
- Same product: Earlier Apple Ipados warnings. 40 in the last 90 days
Why it is Yellow
- CVSS 7.8 high
References
- https://support.apple.com/en-us/149227
- https://support.apple.com/en-us/149230
- https://support.apple.com/en-us/149521
- https://support.apple.com/en-us/149522
- https://support.apple.com/en-us/149523
- https://support.apple.com/en-us/149524
- https://support.apple.com/en-us/149525
- https://support.apple.com/en-us/149526
Original description
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.
Last activity 26 Oct 2026. Patch Forecast updates every hour.