CVE-2026-113896

Published: Oct 26, 2026Modified: Oct 29, 2026

4.7

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.0 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data.

Related CWEs

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (6)

https://support.apple.com/en-us/149227

Source: product-security@apple.com

https://support.apple.com/en-us/149230

Source: product-security@apple.com

https://support.apple.com/en-us/149521

Source: product-security@apple.com

https://support.apple.com/en-us/149522

Source: product-security@apple.com

https://support.apple.com/en-us/149523

Source: product-security@apple.com

https://support.apple.com/en-us/149526

Source: product-security@apple.com

Timeline

No history available yet.