Loading vulnerability…
Use-after-free in Apple operating systems allowing kernel memory corruption
CVE-2026-112514 is a use-after-free vulnerability affecting iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An attacker may trigger unexpected system termination or corrupt kernel memory. The affected function and precise triggering mechanism are not specified. Apple addressed the issue through improved memory management.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation may cause system-level denial of service through unexpected termination or compromise kernel memory integrity. Arbitrary code execution, privilege escalation, and information disclosure are not confirmed.
Patch, then assume compromise.
Install the applicable fixed release: iOS 26.7.2 or 27.2; iPadOS 26.7.2 or 27.2; macOS Golden Gate 27.2, macOS Sequoia 15.8.2, or macOS Tahoe 26.7.2; tvOS 27.2; visionOS 27.2; or watchOS 27.2. These releases address the use-after-free through improved memory management.
No public exploits tracked yet. Mallory keeps watching.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.