CVE-2026-112611None▾ TwilightPoC availableAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted PDF file …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 2.8 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
1 GitHub repo (last check)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted PDF file may lead to memory corruption.
ios_and_ipados < 26.7.2ios_and_ipados < 27.2macOS < 15.8.2macOS < 26.7.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113913Medium· 6.5An input validation issue was addressed with improved input validation
CVE-2026-86972NoneA buffer overflow was addressed with improved size validation
CVE-2026-113912High· 7.1An out-of-bounds access issue was addressed with improved bounds checking
CVE-2026-86991NoneA buffer overflow was addressed with improved bounds checking
CVE-2026-112476NoneAn out-of-bounds read was addressed with improved bounds checking
CVE-2026-112698NoneThe issue was addressed with improved memory handling