Vulnerabilities / CVE-2026-113897
Critical · not yet confirmed exploited · Apple SafariCVE-2026-113897
Apple Safari critical critical vulnerability, CVSS 10.0.
This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.
| Vendor and product | Apple · Safari |
|---|---|
| Type | critical vulnerability |
| Severity | Critical 10.0 CVSS base score |
| Affected versions | Safari: before 27.2 iOS and iPadOS: before 27.2 macOS: before 27.2 visionOS: before 27.2 |
| First published | 26 October 2026 |
| Exploited | Not confirmed. Critical flaws in Apple products have been exploited before: Apple appears on CISA's exploited list. |
Patch before it is exploited
Apply the vendor's fix or mitigation; CISA lists only vulnerabilities seen exploited.
If you cannot patch now, restrict network access to the affected product.
Check for signs of compromise since the date it was added to the list.
Know the day it starts being used
Threat Landscape Monitoring fingerprints the software your internet-facing hosts disclose and tells you the day a vulnerability on them is confirmed exploited, with the host and the fix. The free plan covers one domain.
CVE-2026-113897 in short
Is CVE-2026-113897 being exploited?
Not confirmed as of 14 November 2026: CISA has not added it to its Known Exploited Vulnerabilities catalogue. Critical flaws in Apple products are a frequent target, so patch before that changes; this page is updated daily.
How severe is CVE-2026-113897?
NVD rates it critical, with a CVSS base score of 10.0.
Which versions of Apple Safari are affected by CVE-2026-113897?
According to the CVE record: Safari: before 27.2; iOS and iPadOS: before 27.2; macOS: before 27.2; visionOS: before 27.2. Check the vendor's advisory for the fixed version.
How do I fix CVE-2026-113897?
Apply the vendor's fix or mitigation; CISA lists only vulnerabilities seen exploited. If you cannot patch now, restrict network access to the affected product. Check for signs of compromise since the date it was added to the list.
Sources: NVD, the CVE record, FIRST EPSS and the CISA Known Exploited Vulnerabilities catalogue. Page compiled automatically by SAK T.L.M, the threat-intelligence tool of SAK T.E.C, on 14 November 2026.