{"metadata": {"vulnerability": "CVE-2026-112706", "count": 23, "kinds": {"milestone": 7, "sighting": 4, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0456", "record": "NCSC-2026-0456", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-19T17:05:24.042Z", "date_only": false, "value": "2026-10-19T17:05:24.042Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-112706", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": true, "value": "2026-10-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1387", "record": "CERTFR-2026-AVI-1387", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-26T20:00:00Z", "date_only": false, "value": "2026-10-26T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20261027", "record": "CVE-2026-112706", "field": "creation_timestamp", "uuid": "2c67e52e-2858-4d39-b09b-dbc595ea3925", "url": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20261027"}, {"timestamp": "2026-10-26T20:35:30.955Z", "date_only": false, "value": "2026-10-26T20:35:30.955Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112706", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T20:35:30.955Z", "date_only": false, "value": "2026-10-26T20:35:30.955Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2026-112706", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T21:18:05Z", "date_only": false, "value": "2026-10-26T21:18:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X56J-QJ7G-R33Q", "record": "GHSA-X56J-QJ7G-R33Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-26T21:18:05.683Z", "date_only": false, "value": "2026-10-26T21:18:05.683", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112706", "record": "FKIE_CVE-2026-112706", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T21:20:13.327Z", "date_only": false, "value": "2026-10-26T21:20:13.327395Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117509299128531869", "record": "CVE-2026-112706", "field": "creation_timestamp", "uuid": "88d49e9b-7fc6-4733-b7b6-3e1f7d335832", "content": "CVE-2026-112706  A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.\nhttps://www.cve.org/CVERecord?id=CVE-2026-112706https://support.apple.com/en-us/149227https://support.apple.com/en-us/149230https://support.apple.com/en-us/149524https://support.apple.com/en-us/149525https://support.apple.com/en-us/149526#Apple #iOSandiPadOS #tvOS #visionOS #watchOS#CVE_2026_112706#bot", "url": "https://infosec.exchange/users/cve/statuses/117509299128531869"}, {"timestamp": "2026-10-26T21:36:23Z", "date_only": false, "value": "2026-10-26T21:36:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X56J-QJ7G-R33Q", "record": "GHSA-X56J-QJ7G-R33Q", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1387", "record": "CERTFR-2026-AVI-1387", "field": "last_revision_date"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1387", "record": "CERTFR-2026-AVI-1387", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1387", "record": "CERTFR-2026-AVI-1387", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-27T08:05:28.446Z", "date_only": false, "value": "2026-10-27T08:05:28.446863Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0456", "record": "NCSC-2026-0456", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-27T08:05:28.446Z", "date_only": false, "value": "2026-10-27T08:05:28.446863Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0456", "record": "NCSC-2026-0456", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T08:05:28.446Z", "date_only": false, "value": "2026-10-27T08:05:28.446863Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0456", "record": "NCSC-2026-0456", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-27T14:53:24.677Z", "date_only": false, "value": "2026-10-27T14:53:24.677", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112706", "record": "FKIE_CVE-2026-112706", "field": "lastModified"}, {"timestamp": "2026-10-28T12:00:07Z", "date_only": false, "value": "2026-10-28T12:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107739", "record": "CVE-2026-112706", "field": "creation_timestamp", "uuid": "a030cf52-a78a-4a5f-9c3f-65048405d815", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112706-CoreMedia-fd-leak\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aisikeji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-28 11:57:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIndependent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5\u201327.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107739", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-28T12:00:07Z", "date_only": false, "value": "2026-10-28T12:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/107739", "record": "CVE-2026-112706", "field": "creation_timestamp", "uuid": "4923963a-b3f9-4dd5-b16a-ec5a3b624bff", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112706-CoreMedia-fd-leak\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aisikeji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-28 11:57:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIndependent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5\u201327.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107739"}, {"timestamp": "2026-10-29T13:18:59.454Z", "date_only": false, "value": "2026-10-29T13:18:59.454818Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112706", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-29T13:27:20.295Z", "date_only": false, "value": "2026-10-29T13:27:20.295Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-112706", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T13:27:20.295Z", "date_only": false, "value": "2026-10-29T13:27:20.295Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112706", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T15:30:39Z", "date_only": false, "value": "2026-10-29T15:30:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X56J-QJ7G-R33Q", "record": "GHSA-X56J-QJ7G-R33Q", "field": "modified"}], "metrics": {"as_of": "2026-10-29T21:00:00.484Z", "anchors": {"origin": {"timestamp": "2026-10-26T20:35:30.955Z", "date_only": false, "value": "2026-10-26T20:35:30.955Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112706", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-26T20:35:30.955Z", "date_only": false, "value": "2026-10-26T20:35:30.955Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112706", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-28T12:00:07Z", "date_only": false, "value": "2026-10-28T12:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107739", "record": "CVE-2026-112706", "field": "creation_timestamp", "uuid": "a030cf52-a78a-4a5f-9c3f-65048405d815", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112706-CoreMedia-fd-leak\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aisikeji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-28 11:57:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIndependent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5\u201327.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107739", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 141876.045, "hours": 39.4100125, "days": 1.642083854166667, "min_seconds": 141876.045, "max_seconds": 141876.045, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-26T20:35:30.955Z", "date_only": false, "value": "2026-10-26T20:35:30.955Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112706", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T12:00:07Z", "date_only": false, "value": "2026-10-28T12:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107739", "record": "CVE-2026-112706", "field": "creation_timestamp", "uuid": "a030cf52-a78a-4a5f-9c3f-65048405d815", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112706-CoreMedia-fd-leak\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aisikeji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-28 11:57:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIndependent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5\u201327.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107739", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 260669.529461, "hours": 72.40820262805555, "days": 3.0170084428356483, "min_seconds": 260669.529461, "max_seconds": 260669.529461, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-26T20:35:30.955Z", "date_only": false, "value": "2026-10-26T20:35:30.955Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112706", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T21:00:00.484Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 118793.484461, "hours": 32.998190128055555, "days": 1.3749245886689814, "min_seconds": 118793.484461, "max_seconds": 118793.484461, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T12:00:07Z", "date_only": false, "value": "2026-10-28T12:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107739", "record": "CVE-2026-112706", "field": "creation_timestamp", "uuid": "a030cf52-a78a-4a5f-9c3f-65048405d815", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-112706-CoreMedia-fd-leak\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aisikeji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-28 11:57:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIndependent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5\u201327.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107739", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T21:00:00.484Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}