A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A website may be able to use a media format that should be restricted in Lockdown Mode.
History

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Title Media Format Restriction Bypass in Safari Lockdown Mode
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple safari
Weaknesses CWE-20
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple safari

Mon, 26 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A website may be able to use a media format that should be restricted in Lockdown Mode.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-10-26T20:41:59.460Z

Updated: 2026-10-26T20:41:59.460Z

Reserved: 2026-10-20T21:06:55.479Z

Link: CVE-2026-113952

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-26T21:18:11.920

Modified: 2026-10-27T14:53:24.677

Link: CVE-2026-113952

cve-icon Redhat

No data.