CVE-2026-113950
Low risk· EPSS 13%Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
Risk Assessment
Process memory corruption can lead to application crashes or potentially be exploited for code execution. The risk increases when processing untrusted font files.
Recommendation
Update the listed Apple systems to the fixed versions. Exercise caution when opening documents and fonts from untrusted sources.
Other vulnerabilities in iOS, iPadOS, macOS, tvOS, visionOS, watchOS
See all- CVE-2026-65350High
A use-after-free issue was addressed with improved memory management. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112546Low risk· EPSS 12%
An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.
- CVE-2026-112518Low risk· EPSS 13%
A signature validation issue in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was addressed with improved checks. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.
- CVE-2026-112501Low risk· EPSS 14%
A race condition was addressed with improved state handling. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2, and an app may be able to cause unexpected system termination.
- CVE-2026-112477Low risk· EPSS 14%
A race condition was addressed with improved locking. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112476Low risk· EPSS 14%
An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
- CVE-2026-112474Low risk· EPSS 13%
A use-after-free issue was addressed with improved memory management. An app may be able to cause unexpected system termination or write kernel memory.
- CVE-2026-112470Low risk· EPSS 14%
An out-of-bounds write issue was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112446Low risk· EPSS 14%
This issue was addressed with additional entitlement checks. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27 and 27.2, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.
- CVE-2026-43668High
A use after free issue was addressed with improved memory management. This issue is fixed in several versions of Apple operating systems.
Original NVD description (English source)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS