CVE-2026-113910

CVE-2026-113910 is a memory initialization vulnerability discovered by security researcher Tucker Willenborg in Apple's operating systems. The flaw stems from an issue where uninitialized kernel memory is not properly cleared. As a result, an application installed on an affected device could exploit this vulnerability to read and disclose sensitive kernel memory, potentially exposing privileged information such as cryptographic keys or authentication tokens. Apple addressed this issue in October 2026 by implementing improved memory handling across its software ecosystem. The fix has been deployed in security updates for various platforms, including iOS 27.2 and 26.7.2, iPadOS 27.2 and 26.7.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.