Apple iOS 27.2 fixes 163 flaws, including critical WebKit RCE
The release addresses memory corruption, sandbox escape, kernel writes, and unauthorized access to sensitive user data across many components.
74
CVE-2026-112566
Proximity null-pointer DoS in multiple Apple OS releases
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A null pointer dereference in several Apple operating systems can be triggered by an attacker who is physically near the device. No authentication or user interaction is described. Successful triggering causes a denial of service. Fixes are in the listed iOS, iPadOS, macOS, tvOS, visionOS, and watchOS releases; affected builds before those fixes are not listed.
What to do: Install iOS/iPadOS 26.7.2 or 27.2, macOS Tahoe 26.7.2, macOS Golden Gate 27.2, and tvOS, visionOS, and watchOS 27.2.
| Product | Affected | Fixed in |
|---|---|---|
| Apple iOS and iPadOS | — | iOS 26.7.2 and iPadOS 26.7.2; iOS 27.2 and iPadOS 27.2 |
| Apple macOS Golden Gate | — | 27.2 |
| Apple macOS Tahoe | — | 26.7.2 |
| Apple tvOS | — | 27.2 |
| Apple visionOS | — | 27.2 |
| Apple watchOS | — | 27.2 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.