CVE-2026-113897

None

CVSS

—

EPSS

0.3%

Published

Oct 26, 2026

CISA due date

—

The record

This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.

Affected packages

Ecosystem	Package	Introduced	Fixed