CVE-2026-113912: Security vulnerability

·
Updated

Credit

an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Bhaswanth Chigurupati, LiangWei, Sindre Sorhus, Johnny Franks@@0xjohnny, Daniel, KennethLi, Huy Nguyen@@34306(Calif), Jaebin Sim (simjabin.com)@@gmail, Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Richard Hyunho Im at Route Zero Security@@richeeta, Jaeyeong Lee, Dohyeon An Technology Inc@@PILAB, Hcamael, 章鱼哥 (aipyaipy.com)@@aipy, Narendra Singh@@_3P1C, Rahul Raj, @@Licht_jb, lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx@@r3pwnx, Lily Cohl@@GenericCoding, Nathaniel Oh@@calysteon, Marco Schmitt(Calif), Andrey Chernykh(Calif), Josh Maine(Calif), Franco Belman at Blackwing Intelligence, Chris Bailey - Short Circuit, Neon, Niels Hofmans, Mustafa Calap@@ordinal0, dbg.re), Ivan Fratric(Google Project Zero), N.M.Praveen Nawarathne@@zblockrat, Mateusz Jurczyk(Google Project Zero), Tucker Willenborg, Stuart Wallace, an anonymous researcher(Calif), 章鱼哥 (aipyaipy.com)@@aipy(Calif), Roman Zabicki(Calif), Anna Groza@@pwnlambda(Calif), Meta Product Security, Përparim Mjeku, Altin Gashi, f4&Zhiniang Peng with HUST(Calif), Aobo Wang@@M4x_1997(Calif), Xiang Chen(Calif), Jakob Pammer(Calif), Substrate, Stefan Esser (Calif), Adriatik Raci(Lupus Nova), Rodolphe BRUNETTI@@eisw0lf(Lupus Nova), 정우 하@@0xfa11babe, Nurihan Kim (HanTul)(TrendAI Zero Day Initiative), R4mbb(Lupus Nova), Somair Ansar, Abodi Dawoud, D4rthL, Roman Zabicki(Talence Security), Tristan Madani@@TristanInSec(Talence Security), Jihwan Yoon, Yash Pandya, Parth Raval, Garin R, sh3rlock (김보겸), Nik Tsytsarkin, PETOWORKS의 Bugeun Choi@@Bugeun(Google Project Zero), Rahul Raj(Google Project Zero), Piotr Jerzy Duszynski(Google Project Zero), Charles Stevenson, Seung Je Seong, Mathis Mansière, Bhuwan Bhetwal(Braze Security Team), Kwak Kiyong@@Pwnkai23(Braze Security Team), Song Nuri(Braze Security Team), Nicolas Seriot(Braze Security Team), Tommy DeVoss@@thedawgyg(Braze Security Team), Navapon Premkasem, Aswin Kumar Gokulakannan, Peter Malone, Richard Zana, Pedro Pinho, Wang Yu, Nebula Security@@nebusecurity(Aginor), Tim Michaud@@TimGMichaud(Aginor), Xinru Chi(Pangu Lab), Billy Jheng Bing Jhong(STAR Labs SG Pte), Pan Zhenpeng@@Peterpan0927(STAR Labs SG Pte), Pasquale Scola, Wout van der Ploeg (woutvanderploeg.nl), John Lussier, Cem Onat Karagun, greenbynox, Marc Newlin(SkySafe), OpenAI, Arnold Cartagena(Tolmo), Matt Suiche@@msuiche(Tolmo), Will Estes, Jerry L. Knot, Eliya M., Viacheslav Radiukov, Tristan Madani (Talence Security), Robert Tran, Vinay Kumar Rasala (Xplo8E)(Appknox), CVE-2026-112500, Daniel Rodríguez, Abodi Dawoud(Lupus Nova), Zhongquan Li@@Guluisacat(Positive Technologies), Ilya Andr (andrd3v)(Positive Technologies), Azize Rhounam, Mahmoud Abdelmoniem, Zhongcheng Li (CK01)(Positive Technologies), Musaab Khan@@bxff, Saoud Khalifah, stratan@@5tratan, ret2happy@@ret2happy, 진규정 (Gyujeong Jin(DEVCORE Research Team), @@G1uN4sh(DEVCORE Research Team), Lucas Parnell(DEVCORE Research Team), ret2happy@@ret2happy(DEVCORE Research Team), Meta Red Team X - Nik Tsytsarkin(DEVCORE Research Team), YingMuo@@YingMuo(DEVCORE Research Team), Md Rasel Bhuyan (www.linkedin.com/in/rasel-bhuyan), Varik Matevosyan@@D4RK7ET, Prafull Dhiman, Alto_00000, JeongAhn Jang(sentry), Alto_00000(sentry), Nicolas Seriot(sentry), 김도현(sentry), Abodi Dawoud(sentry), Drin Raci(sentry), Jakob Pammer(Appknox), Stuart Wallace(Appknox), hamayanhamayan(Appknox), Ilya Andr (andrd3v), Hongsik Kim (mnur), Yujung Choi@@Dusker, Robert Mindo, Stav Nir, Vladimir Tokarev, Aditya Kumar, Lucas Lammer, Mickey Jin@@patch1t, silo, Joshua Mason(Mandiant), Gergely Kalman@@gergely_kalman, zenith, Santiago Albertengo, Wesley Wineberg, Rotce(SkySafe), Sandeep Wawdane (thecybersandeep)(SkySafe), Ankur Saini(Volexity), Kwak Kiyong@@Pwnkai23, Song nuri, Do Young Park (adawn), MYUNGYONG LEE, Luke Francis@@lukefr09, Shubham Chaskar, Kwak Kiyong, Song Nuri, Avinash Kumar Thapa & Jay Kaushik Patel, Hossein Lotfi@@hosselot(TrendAI Zero Day Initiative), 은태 장, Franz Bettag, OpenAI Codex Security - Amy Burnett, Euntae Jang, pwn2addr, Gia Bui@@yabeow(Calif), Myungyong Lee, remanone@@remanone_, Josef Korbel (Citadelo), Charles Kern, Malik M.@@m411k_, Chris Rohlf with Anthropic Research, Drinor Selmanaj (Sentry), Eddy Tsalolikhin, Luke Francis, Jackson Kuja, Johan Wahyudi, tamdao, Chanwit Muenprakoddee (ChemIndy), Lance Cain - Senior Security Researcher at SpecterOps Inc., Paul Montgomery@@nullevent, Lakshay Sharma (MrW0r57), Andreas Jaegersberger & Ro Achterberg(Nosebeard Labs), Murray Mike, 준우 이, Frederick Kaludis (Coiffeur0x90)(Nosebeard Labs), DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, Zwei Tasse Kaffee, Frederick Kaludis (Coiffeur0x90)(DBAppSecurity's WeBin lab), YingQi Shi@@Mas0nShi(DBAppSecurity's WeBin lab), Lakshay Sharma (MrW0r57)/WorstCase Labs.(Iru), Ashish Kavishwar(Iru), Csaba Fitzl@@theevilbit(Iru), Jurre van Bergen - Threatnotify, 章鱼哥 (aipyaipy.com）@@aipy, Redon Gashi (Sentry), Sanny Mitra, Alfredo Pesoli@@__rev(Bynar), Koh M. Nakagawa@@tsunek0h(FFRI Security Inc), Lyutoon, Andrey Chernykh (BypassLabs.ai), Keisuke Hosoda, oxsignal, R4mbb, Ye Zhang@@VAR10CK(Baidu Security), f00l@@PPPF00L, 3ndy1@@_3ndy1, Anand (anandsreekumar.com), He Wei (ギカク), powerprove(Protectiv IT Security Inc), Michael Benich(Protectiv IT Security Inc), Niels Hofmans(Protectiv IT Security Inc), Christian Niel Angel(Protectiv IT Security Inc), Lyutoon(SecuRing), Seung Je Seong(SecuRing), R4mbb(SecuRing), Wojciech Regula(SecuRing), Minseok Kim, Dave G., Thanatos Tian (HKPolyU) & wgg & xmr, Marco Schmitt, Sattyam Yadav(Protectiv IT Security Inc), onetwo(Protectiv IT Security Inc), Merrick Hare, ธนกฤต ทัฬหะ(Google Project Zero), f0r(MurphySec), Johann Rehberger, an anonymous researcher(Google Project Zero), PETOWORKS의 Bugeun Choi@@Bugeun, Andrey Chernykh, Sihyun Roh (Compsec, SNU), Nord0x, OpenAI(STAR Labs SG Pte), Nebula Security@@nebusecurity, Jakob Pammer, Ryan Hileman via Xint Code (xint.io), Yiğit Can YILMAZ@@yilmazcanyigit, Zhongquan Li@@Guluisacat, Mustafa Ahmed, Nathaniel Oh@@calysteon(DEVCORE Research Team), Jonathan Bar Or@@yo_yo_yo_jbo, Siddharth Aeri, Gabriel '0xv1n' Cardona, Mrunal Chawda, Kujtim Kryeziu (Sentry), 도현 김, Ithrael, YEONGJAE SHIN, Efstratios Kaplanellis@@5tratan(Almamater Technologies), ruitong@@abstract, an anonymous researcher(Nosebeard Labs), Niels Hofmans(Nosebeard Labs), 도현 김(Nosebeard Labs), Junyeong Lee (jylab.github.io)(Nosebeard Labs), Jonghoon Han (Aegis), f4&Zhiniang Peng with HUST, Geonha Lee@@leegn4a, Arni Hardarson (Neonix Security), Alfredo Pesoli via Bynario Atlas (bynar.io)@@__rev, Anon Tuttu Venus, koocolb, Arni Hardarson (Neonix Security)(Iru), Pranav Gopalkrishnan, Alan Wang, Ailsa Sun, Hovav Shacham, Riccardo Paccagnella, Chris Fletcher, David Kohlbrenner, Richard Hyunho Im at Route Zero Security@@richeeta(Almamater Technologies), Alex Radocea, cnitlrt@@abstract(Sentry), Roman Belovitskiy(Sentry), Lyutoon(Sentry), Art Pllana(Sentry), Redon Gashi(Sentry), Teodor Sorescu@@teodorsorescu, Phillip Groves, lokerxx, cnitlrt@@abstract, Albin Haliti, Asaf Cohen, Guilherme Rambo(Best Buddy Apps), Bhuwan Bhetwal(ThreatBook), Feng Xue(ThreatBook), XGPT(ThreatBook), Nathaniel Oh@@calysteon(Talence Security), Narendra Singh@@_3P1C(Talence Security), Pan ZhenPeng@@Peterpan0927(STAR Labs SG Pte), Gergely Kalman@@gergely_kalman(Nosebeard Labs), Lyutoon(Nosebeard Labs), Jaeyeong Lee(Nosebeard Labs), Maher Azzouzi, Frederick Kaludis (Coiffeur0x90), Mufeed VH(Winfunc Research), 云开 江, Joshua Maina, Mahmoud Gamal@@Zombiehelp54, Thanatos Tian (HKPolyU) & wgg & 2st with Diffract(Aginor), Peter Malone(Aginor), Aswin Kumar Gokula Kannan, David Krehwinkel, Ricardo Prado, Nguyen Duc Anh(Noventiq), Thanatos Tian (HKPolyU) & wgg with Diffract, Bhuwan Bhetwal, Kwak kiyong@@Pwnkai23, We Muftihaturrahmah, Ruslan Dautov, Thomas Guillem, Jay K Patel, Jay J Patel, Jay Patel, powerprove(SecuRing), Michael Benich, Robert Tran(Protectiv IT Security Inc), Merrick Hare(Protectiv IT Security Inc), @@pixiepointsec, Aidan Hunt (forgechroma.com), OSORI(Iru), wdszzml(Iru), Atuin Automated Vulnerability Discovery Engine(Iru), 준우 이(Colorado Boulder), an anonymous researcher(Colorado Boulder), Ruitong (Abstract Lab(Colorado Boulder), University(Colorado Boulder), YUJUNG CHOI@@Dusker, an anonymous researcher(Talence Security), Maher Azzouzi(Nosebeard Labs), Ryan Dowd@@_rdowd, Thanatos Tian (HKPolyU) & wgg & 2st with Diffract, Murray Mike(Nosebeard Labs), Ahmad Al Harrizuan Izadin(Iru), Prathamesh Walunj(Iru), 진규정 (Gyujeong Jin, @@G1uN4sh, Morris Richman@@morrisinlife, Seiji Sakurai@@HeapSmasher

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 27.2
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 26.7.2
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.8.2
  4. Upgrade

    Upgrade iOS/iPadOS to a version that resolves this vulnerability.

    Fixed in 26.7
  5. Upgrade

    Upgrade iOS/iPadOS to a version that resolves this vulnerability.

    Fixed in 27.2
  6. Upgrade

    Upgrade macOS Golden Gate to a version that resolves this vulnerability.

    Fixed in 27.2
  7. Upgrade

    Upgrade macOS Sequoia to a version that resolves this vulnerability.

    Fixed in 15.8.2
  8. Upgrade

    Upgrade macOS Tahoe to a version that resolves this vulnerability.

    Fixed in 26.7.2
  9. Upgrade

    Upgrade tvOS to a version that resolves this vulnerability.

    Fixed in 27.2
  10. Upgrade

    Upgrade visionOS to a version that resolves this vulnerability.

    Fixed in 27.2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203