GCVE-1988-2026-0462

Vulnerability from gna-1988 – Published: 2026-11-02 07:30 – Updated: 2026-11-02 07:30
VLAI
Title
APPLE-SA-10-26-2026-10 Safari 27.2
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-10 Safari 27.2 Safari 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149527. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. LinkPresentation Available for: macOS Sequoia and macOS Tahoe Impact: Processing a maliciously crafted image may result in memory corruption Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112621: Vinay Kumar Rasala (Xplo8E) from Appknox, an anonymous researcher WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 328114 CVE-2026-113904: Lily Cohl (@GenericCoding), Do Young Park (adawn), MYUNGYONG LEE, Luke Francis (@lukefr09), Shubham Chaskar, Kwak Kiyong, Song Nuri WebKit Bugzilla: 317465 CVE-2026-112599: Avinash Kumar Thapa & Jay Kaushik Patel WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to memory corruption Description: A type confusion issue was addressed with improved checks. WebKit Bugzilla: 321609 CVE-2026-86974: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 318331 CVE-2026-86986: an anonymous researcher WebKit Bugzilla: 328131 CVE-2026-112693: 은태 장 WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: This issue was addressed with improved input validation. WebKit Bugzilla: 318522 CVE-2026-86985: Pasquale Scola WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. WebKit Bugzilla: 323130 CVE-2026-112699: an anonymous researcher WebKit Bugzilla: 323148 CVE-2026-112680: Franz Bettag, Kwak Kiyong, Song Nuri WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 322916 CVE-2026-112697: OpenAI Codex Security - Amy Burnett, 은태 장 WebKit Bugzilla: 324150 CVE-2026-112655: Euntae Jang WebKit Bugzilla: 322120 CVE-2026-112651: Euntae Jang WebKit Bugzilla: 323265 CVE-2026-112623: pwn2addr, Lily Cohl (@GenericCoding) WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process termination Description: A race condition was addressed with improved locking. WebKit Bugzilla: 323986 CVE-2026-112686: an anonymous researcher WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: This issue was addressed through improved state management. WebKit Bugzilla: 328132 CVE-2026-112684: Gia Bui (@yabeow) from Calif.io WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process termination Description: A type confusion issue was addressed with improved state handling. WebKit Bugzilla: 322033 CVE-2026-112673: Myungyong Lee WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: A race condition was addressed with improved state handling. WebKit Bugzilla: 323173 CVE-2026-112669: remanone (@remanone_) WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process termination Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 322671 CVE-2026-112695: Josef Korbel (Citadelo), Luke Francis (@lukefr09) WebKit Bugzilla: 321669 CVE-2026-112666: Luke Francis (@lukefr09) WebKit Bugzilla: 321934 CVE-2026-112654: Charles Kern WebKit Bugzilla: 323227 CVE-2026-112653: Malik M. (@m411k_) WebKit Bugzilla: 324735 CVE-2026-112615: Chris Rohlf with Anthropic Research WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A type confusion issue was addressed with improved memory handling. WebKit Bugzilla: 321982 CVE-2026-112659: OpenAI Codex Security - Amy Burnett, Chris Rohlf with Anthropic Research WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to memory corruption Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 324262 CVE-2026-112640: an anonymous researcher WebKit Available for: macOS Sequoia and macOS Tahoe Impact: A website may be able to use a media format that should be restricted in Lockdown Mode Description: A logic issue was addressed with improved checks. WebKit Bugzilla: 324004 CVE-2026-113952: Drinor Selmanaj (Sentry) WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to memory corruption Description: A type confusion issue was addressed with improved state management. WebKit Bugzilla: 323097 CVE-2026-113949: an anonymous researcher WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to unexpected memory modification Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 321652 CVE-2026-113903: Eddy Tsalolikhin, OpenAI Codex Security - Amy Burnett, Lily Cohl (@GenericCoding) WebKit Canvas Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 323377 CVE-2026-112637: Chris Rohlf with Anthropic Research, 은태 장 WebKit JavaScript Bindings Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 328141 CVE-2026-112626: Euntae Jang, Luke Francis (@lukefr09), Shubham Chaskar, Josef Korbel (Citadelo) WebKit Process Model Available for: macOS Sequoia and macOS Tahoe Impact: A remote attacker may be able to break out of Web Content sandbox Description: This issue was addressed by removing the vulnerable code. WebKit Bugzilla: 328129 CVE-2026-113897: Luke Francis, Jackson Kuja WebKit Process Model Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 322743 CVE-2026-112639: Luke Francis (@lukefr09) WebRTC Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 323096 CVE-2026-113901: Kwak Kiyong (@Pwnkai23), Song Nuri WebRTC Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: An out-of-bounds read was addressed with improved bounds checking. WebKit Bugzilla: 323079 CVE-2026-86973: Narendra Singh (@_3P1C), an anonymous researcher Additional recognition Safari We would like to acknowledge Azza Tegar Naufal Ataullah, Exell Nakano, Zhiyang Zeng (@Wester), satrya wira yudha for their assistance. Service Workers We would like to acknowledge Meta Red Team X - Nik Tsytsarkin for their assistance. WebKit We would like to acknowledge Claudio Bozzato and Francesco Benvenuto of Cisco Talos, Stan Shaw, Volodymyr Diachenko, Wael Alolowi, an anonymous researcher for their assistance. WebKit Sandboxing We would like to acknowledge Claudio Bozzato and Francesco Benvenuto of Cisco Talos for their assistance. Safari 27.2 may be obtained from the Mac App Store. All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmrfvT8ACgkQ4Ifiq8DH 7PXDFA/+JiE7IlJGXWwjUx9eCynW8wNj17bncAZH5uc1pF/Q2ERnHfzD+53oqxHS P8DVfaLHFYmlPwzV2saWnB9Jlv3sGzCt4X9qCNwM3koxOnXbJFXuzKi047e624hC +6ykLYII0DlogFli9TjrHCXRWMzLhb04erqFYfvr8HXpq3pEE4mH3TVLfhNbR0v3 SPqSrnbsg81mlFMhhJ9D4C78OcRveZVv1/QHYJeHtLyB+OfW1UYM9/Lu0SvdCeEI HeLP1W2xTBpgpVfl4KK3+d9J/O7uao/1MR8EuvrM6J/sevK8k1d6IYnjhqEHTjNI f0/IcjCUWT3TNGjtgJT9lUbbXV8UXoOVMLHv8XubyZZxf0bYD1F2VusYJfUcLIbh yrNby3kEkj0jeiVIHmQgY+OxoKpVvReerHkZuZfALJ3ffsZFKuz4/cJVME6AiZ8k rx+bSRAaKa/29HSmU4m2WHyFjD8VySI5jI7oJ05my6yCitbz6QkKmqCNGhsCQzJC qEvjkq3T2oPmPY27Y7FfMDN7A/WTXE6XPHGtAAOWrChtQtFWJd21hPOn00DZjN63 1C1LOeqa0QQrDOpa2QnDu9pMblo5CaJpGLxtVPHu0ibnwYiuHlOi6IFQZ6CfsajG GVhDV2NO3QJJ2VUJ6bQppNg+2YvlvATURMl96cFFAoYObIuAfgE= =epcU -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
VULNARCHIVE GNA GNA-1988
GNA scorecard E 38/100 over 552 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
Apple Safari Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0462 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-10 Safari 27.2\n\nSafari 27.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149527.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nLinkPresentation\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing a maliciously crafted image may result in memory\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112621: Vinay Kumar Rasala (Xplo8E) from Appknox, an anonymous\nresearcher\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 328114\nCVE-2026-113904: Lily Cohl (@GenericCoding), Do Young Park (adawn),\nMYUNGYONG LEE, Luke Francis (@lukefr09), Shubham Chaskar, Kwak Kiyong,\nSong Nuri\nWebKit Bugzilla: 317465\nCVE-2026-112599: Avinash Kumar Thapa \u0026 Jay Kaushik Patel\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to memory\ncorruption\nDescription: A type confusion issue was addressed with improved checks.\nWebKit Bugzilla: 321609\nCVE-2026-86974: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected Safari crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 318331\nCVE-2026-86986: an anonymous researcher\nWebKit Bugzilla: 328131\nCVE-2026-112693: \uc740\ud0dc \uc7a5\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: This issue was addressed with improved input validation.\nWebKit Bugzilla: 318522\nCVE-2026-86985: Pasquale Scola\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nWebKit Bugzilla: 323130\nCVE-2026-112699: an anonymous researcher\nWebKit Bugzilla: 323148\nCVE-2026-112680: Franz Bettag, Kwak Kiyong, Song Nuri\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 322916\nCVE-2026-112697: OpenAI Codex Security - Amy Burnett, \uc740\ud0dc \uc7a5\nWebKit Bugzilla: 324150\nCVE-2026-112655: Euntae Jang\nWebKit Bugzilla: 322120\nCVE-2026-112651: Euntae Jang\nWebKit Bugzilla: 323265\nCVE-2026-112623: pwn2addr, Lily Cohl (@GenericCoding)\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process termination\nDescription: A race condition was addressed with improved locking.\nWebKit Bugzilla: 323986\nCVE-2026-112686: an anonymous researcher\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: This issue was addressed through improved state management.\nWebKit Bugzilla: 328132\nCVE-2026-112684: Gia Bui (@yabeow) from Calif.io\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process termination\nDescription: A type confusion issue was addressed with improved state\nhandling.\nWebKit Bugzilla: 322033\nCVE-2026-112673: Myungyong Lee\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected Safari crash\nDescription: A race condition was addressed with improved state\nhandling.\nWebKit Bugzilla: 323173\nCVE-2026-112669: remanone (@remanone_)\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process termination\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 322671\nCVE-2026-112695: Josef Korbel (Citadelo), Luke Francis (@lukefr09)\nWebKit Bugzilla: 321669\nCVE-2026-112666: Luke Francis (@lukefr09)\nWebKit Bugzilla: 321934\nCVE-2026-112654: Charles Kern\nWebKit Bugzilla: 323227\nCVE-2026-112653: Malik M. (@m411k_)\nWebKit Bugzilla: 324735\nCVE-2026-112615: Chris Rohlf with Anthropic Research\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nWebKit Bugzilla: 321982\nCVE-2026-112659: OpenAI Codex Security - Amy Burnett, Chris Rohlf with\nAnthropic Research\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to memory\ncorruption\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 324262\nCVE-2026-112640: an anonymous researcher\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: A website may be able to use a media format that should be\nrestricted in Lockdown Mode\nDescription: A logic issue was addressed with improved checks.\nWebKit Bugzilla: 324004\nCVE-2026-113952: Drinor Selmanaj (Sentry)\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to memory\ncorruption\nDescription: A type confusion issue was addressed with improved state\nmanagement.\nWebKit Bugzilla: 323097\nCVE-2026-113949: an anonymous researcher\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to\nunexpected memory modification\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 321652\nCVE-2026-113903: Eddy Tsalolikhin, OpenAI Codex Security - Amy Burnett,\nLily Cohl (@GenericCoding)\n\nWebKit Canvas\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 323377\nCVE-2026-112637: Chris Rohlf with Anthropic Research, \uc740\ud0dc \uc7a5\n\nWebKit JavaScript Bindings\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 328141\nCVE-2026-112626: Euntae Jang, Luke Francis (@lukefr09), Shubham Chaskar,\nJosef Korbel (Citadelo)\n\nWebKit Process Model\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: A remote attacker may be able to break out of Web Content\nsandbox\nDescription: This issue was addressed by removing the vulnerable code.\nWebKit Bugzilla: 328129\nCVE-2026-113897: Luke Francis, Jackson Kuja\n\nWebKit Process Model\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 322743\nCVE-2026-112639: Luke Francis (@lukefr09)\n\nWebRTC\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 323096\nCVE-2026-113901: Kwak Kiyong (@Pwnkai23), Song Nuri\n\nWebRTC\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nWebKit Bugzilla: 323079\nCVE-2026-86973: Narendra Singh (@_3P1C), an anonymous researcher\n\nAdditional recognition\n\nSafari\nWe would like to acknowledge Azza Tegar Naufal Ataullah, Exell Nakano,\nZhiyang Zeng (@Wester), satrya wira yudha for their assistance.\n\nService Workers\nWe would like to acknowledge Meta Red Team X - Nik Tsytsarkin for their\nassistance.\n\nWebKit\nWe would like to acknowledge Claudio Bozzato and Francesco Benvenuto of\nCisco Talos, Stan Shaw, Volodymyr Diachenko, Wael Alolowi, an anonymous\nresearcher for their assistance.\n\nWebKit Sandboxing\nWe would like to acknowledge Claudio Bozzato and Francesco Benvenuto of\nCisco Talos for their assistance.\n\nSafari 27.2 may be obtained from the Mac App Store.\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\nGVhDV2NO3QJJ2VUJ6bQppNg+2YvlvATURMl96cFFAoYObIuAfgE=\n=epcU\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:30:00Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/47"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/47"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149527"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/47"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-10 Safari 27.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-112599",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112615",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112621",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112623",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112637",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112639",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112640",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112651",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112653",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112654",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112655",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112659",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112666",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112669",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112673",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112680",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112686",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112699",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113897",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113901",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113903",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113904",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113949",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113952",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86973",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86974",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86985",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86986",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0462",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/47",
            "automated": true,
            "contentSha256": "f373270268f4702cf5d7d34d12cbcc4f5330e0a75d92c888faa74f564d009f0f",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/47",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:43:33Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0462"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:30:00Z",
    "dateUpdated": "2026-11-02T07:30:00Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0462"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.