Loading vulnerability…
Use-after-free in Apple operating system kernels
CVE-2026-112679 is a use-after-free vulnerability in the kernel of Apple operating systems. An application may trigger the flaw to cause unexpected system termination or corrupt kernel memory. Apple addressed the issue through improved memory management in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. The specific vulnerable function and triggering sequence are not disclosed.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation may cause system-wide denial of service through unexpected termination or compromise kernel memory integrity. Arbitrary code execution, privilege escalation, and information disclosure are not established for this vulnerability.
If you can’t patch tonight, do this now.
No vulnerability-specific temporary workaround is documented. Apply the applicable Apple security update.
Patch, then assume compromise.
Upgrade to iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, or watchOS 27.2, as applicable. These releases address the use-after-free through improved memory management.
No public exploits tracked yet. Mallory keeps watching.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.