CVE-2026-112688: memory corruption flaw in iOS, iPadOS, macOS

CVE-2026-112688 is a memory corruption vulnerability affecting Apple devices and systems; according to the official NVD description, parsing a file may lead to unexpected app termination or arbitrary code execution. The specific product is not reported in the available data, but the fix spans multiple platforms: iOS, iPadOS and macOS.

The declared severity is high, with a CVSS score of 8.8, a notable value reflecting the potential code-execution impact. The vulnerability was published on NVD on October 26, 2026. No public exploit repository signals and no confirmation of active exploitation appear in the provided data; social media attention remains minimal, with only one post in the last 24 hours and few total interactions, a figure to treat as a visibility signal rather than a verified technical fact.

For organizations managing fleets of Apple devices, the priority is to verify and apply updates to the fixed versions: iOS 26.7 and 27.2, iPadOS 26.7 and 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. This patch should be integrated into corporate device management (MDM) cycles, with compliance across the device fleet monitored closely, since the flaw involves ordinary file parsing, a common scenario in work environments.