CVE-2026-113970: Use After Free

Q: What access does an attacker need to exploit the Bluetooth-related issue?

The attacker must be within Bluetooth range of the target device. The reported outcome is corruption of process memory.

Q: Which operating system releases include the fix?

The fix is available in iOS and iPadOS 18.7.12, 26.7.3, and 27.2.1; macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, and macOS Tahoe 26.7.3; visionOS 27.2.1; and watchOS 26.6.1 and 27.2.1.

Published Nov 9, 2026

Updated

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

Other sources

AirPlay. A logic issue was addressed with improved state management.

— Apple

App Intents. An authorization issue was addressed with improved state management.

— Apple

Bluetooth. A use-after-free issue was addressed with improved memory management.

— Apple

Credit

Apple, László Várady, CVE-2026-111497, an anonymous researcher

Affected Software

3 affected componentsFixes available

Apple iOS<27.2.1

27.2.1

Apple iPadOS<27.2.1

27.2.1

Apple macOS Golden Gate<27.2.1

27.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 27.2.1
Upgrade
Upgrade iOS and iPadOS to a version that resolves this vulnerability.
Fixed in 18.7.12
Upgrade
Upgrade iOS, iPadOS, and macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.7.3
Upgrade
Upgrade iOS, iPadOS, macOS Golden Gate, visionOS, and watchOS to a version that resolves this vulnerability.
Fixed in 27.2.1
Upgrade
Upgrade macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.8.3
Upgrade
Upgrade watchOS to a version that resolves this vulnerability.
Fixed in 26.6.1

Event History

Nov 9, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·08:28 PM

Data Sourced

via MITRE·08:28 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What access does an attacker need to exploit the Bluetooth-related issue?

The attacker must be within Bluetooth range of the target device. The reported outcome is corruption of process memory.

Which operating system releases include the fix?

The fix is available in iOS and iPadOS 18.7.12, 26.7.3, and 27.2.1; macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, and macOS Tahoe 26.7.3; visionOS 27.2.1; and watchOS 26.6.1 and 27.2.1.

CVE-2026-113970: Use After Free

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit the Bluetooth-related issue?

Which operating system releases include the fix?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit the Bluetooth-related issue?

Which operating system releases include the fix?