CVE-2026-1139708.8High
CVE-2026-113970: Apple iOS and iPadOS vulnerability
Apple · iOS and iPadOS
Vendor fix available · Affected: Apple iOS and iPadOS · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.3%probability of exploitation in the next 30 days
26th percentile
050100
Higher than 26% of scored CVEs
8.8HighCVSS
LowMediumHighCrit.
DescriptionNVD
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 11 Nov.
- Apple patches Bluetooth and AirPlay pairing flaws across platformsSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.