About the security content of Safari 27.2
This document describes the security content of Safari 27.2.
About Apple security updates
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.
Apple security documents reference vulnerabilities by CVE-ID when possible.
For more information about security, see the Apple Product Security page.
Safari 27.2
Released October 26, 2026
LinkPresentation
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing a maliciously crafted image may result in memory corruption
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-112621: Vinay Kumar Rasala (Xplo8E) from Appknox, an anonymous researcher
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 328114
CVE-2026-113904: Lily Cohl (@GenericCoding), Do Young Park (adawn), MYUNGYONG LEE, Luke Francis (@lukefr09), Shubham Chaskar, Kwak Kiyong, Song Nuri
WebKit Bugzilla: 317465
CVE-2026-112599: Avinash Kumar Thapa & Jay Kaushik Patel
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to memory corruption
Description: A type confusion issue was addressed with improved checks.
WebKit Bugzilla: 321609
CVE-2026-86974: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 318331
CVE-2026-86986: an anonymous researcher
WebKit Bugzilla: 328131
CVE-2026-112693: 은태 장
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: This issue was addressed with improved input validation.
WebKit Bugzilla: 318522
CVE-2026-86985: Pasquale Scola
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may result in the disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
WebKit Bugzilla: 323130
CVE-2026-112699: an anonymous researcher
WebKit Bugzilla: 323148
CVE-2026-112680: Franz Bettag, Kwak Kiyong, Song Nuri
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 322916
CVE-2026-112697: OpenAI Codex Security - Amy Burnett, 은태 장
WebKit Bugzilla: 324150
CVE-2026-112655: Euntae Jang
WebKit Bugzilla: 322120
CVE-2026-112651: Euntae Jang
WebKit Bugzilla: 323265
CVE-2026-112623: pwn2addr, Lily Cohl (@GenericCoding)
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected process termination
Description: A race condition was addressed with improved locking.
WebKit Bugzilla: 323986
CVE-2026-112686: an anonymous researcher
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: This issue was addressed through improved state management.
WebKit Bugzilla: 328132
CVE-2026-112684: Gia Bui (@yabeow) from Calif.io
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected process termination
Description: A type confusion issue was addressed with improved state handling.
WebKit Bugzilla: 322033
CVE-2026-112673: Myungyong Lee
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash
Description: A race condition was addressed with improved state handling.
WebKit Bugzilla: 323173
CVE-2026-112669: remanone (@remanone_)
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected process termination
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 322671
CVE-2026-112695: Josef Korbel (Citadelo), Luke Francis (@lukefr09)
WebKit Bugzilla: 321669
CVE-2026-112666: Luke Francis (@lukefr09)
WebKit Bugzilla: 321934
CVE-2026-112654: Charles Kern
WebKit Bugzilla: 323227
CVE-2026-112653: Malik M. (@m411k_)
WebKit Bugzilla: 324735
CVE-2026-112615: Chris Rohlf with Anthropic Research
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A type confusion issue was addressed with improved memory handling.
WebKit Bugzilla: 321982
CVE-2026-112659: OpenAI Codex Security - Amy Burnett, Chris Rohlf with Anthropic Research
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to memory corruption
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 324262
CVE-2026-112640: an anonymous researcher
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: A website may be able to use a media format that should be restricted in Lockdown Mode
Description: A logic issue was addressed with improved checks.
WebKit Bugzilla: 324004
CVE-2026-113952: Drinor Selmanaj (Sentry)
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to memory corruption
Description: A type confusion issue was addressed with improved state management.
WebKit Bugzilla: 323097
CVE-2026-113949: an anonymous researcher
WebKit
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to unexpected memory modification
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 321652
CVE-2026-113903: Eddy Tsalolikhin, OpenAI Codex Security - Amy Burnett, Lily Cohl (@GenericCoding)
WebKit Canvas
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 323377
CVE-2026-112637: Chris Rohlf with Anthropic Research, 은태 장
WebKit JavaScript Bindings
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 328141
CVE-2026-112626: Euntae Jang, Luke Francis (@lukefr09), Shubham Chaskar, Josef Korbel (Citadelo)
WebKit Process Model
Available for: macOS Sequoia and macOS Tahoe
Impact: A remote attacker may be able to break out of Web Content sandbox
Description: This issue was addressed by removing the vulnerable code.
WebKit Bugzilla: 328129
CVE-2026-113897: Luke Francis, Jackson Kuja
WebKit Process Model
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 322743
CVE-2026-112639: Luke Francis (@lukefr09)
WebRTC
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 323096
CVE-2026-113901: Kwak Kiyong (@Pwnkai23), Song Nuri
WebRTC
Available for: macOS Sequoia and macOS Tahoe
Impact: Processing maliciously crafted web content may lead to an unexpected process crash
Description: An out-of-bounds read was addressed with improved bounds checking.
WebKit Bugzilla: 323079
CVE-2026-86973: Narendra Singh (@_3P1C), an anonymous researcher
Additional recognition
Safari
We would like to acknowledge Azza Tegar Naufal Ataullah, Exell Nakano, Zhiyang Zeng (@Wester), satrya wira yudha for their assistance.
Service Workers
We would like to acknowledge Meta Red Team X - Nik Tsytsarkin for their assistance.
WebKit
We would like to acknowledge Claudio Bozzato and Francesco Benvenuto of Cisco Talos, Stan Shaw, Volodymyr Diachenko, Wael Alolowi, an anonymous researcher for their assistance.
WebKit Sandboxing
We would like to acknowledge Claudio Bozzato and Francesco Benvenuto of Cisco Talos for their assistance.
Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.