Description
This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | Safari | < 27.2 | 27.2 |
| Apple | iOS and iPadOS | < 27.2 | 27.2 |
| Apple | macOS | < 27.2 | 27.2 |
| Apple | visionOS | < 27.2 | 27.2 |
Advisories 3
- WID-SEC-2026-4165 Apple iOS, iPadOS, macOS und Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
- NCSC-2026-0455 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · Oct 28, 2026
- NCSC-2026-0456 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Oct 27, 2026