{"id":"CVE-2026-112410","kind":"vulnerability","aliases":["CVE-2026-112410"],"related":[],"title":"Apple macOS: double free lets a remote attacker crash a process","description":"A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may cause an unexpected process termination.","summary":"A double free memory bug in macOS was fixed with improved memory management in several releases. A remote attacker can cause an unexpected process termination, which is a crash.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":[],"how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions listed below\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe) or later\n- unknown","status":"open","published_at":"2026-10-26T21:17:30+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","triaged_at":"2026-10-26T21:31:54+00:00","updated_at":"2026-10-26T21:31:54+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:31:54Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe) or later\n- unknown","reach":"unknown","title":"Apple macOS: double free lets a remote attacker crash a process","impact":"low","summary":"A double free memory bug in macOS was fixed with improved memory management in several releases. A remote attacker can cause an unexpected process termination, which is a crash.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A remote attacker crashes a process on the Mac","analyst_note":"Check Apple security notes for the exact affected components and whether the trigger needs user interaction; the NVD entry gives no detail.","how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions listed below\n- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Any Mac running an unpatched macOS release is potentially affected, as the sources describe a remote trigger causing a process crash. The sources do not say which services or components are reachable remotely, so unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000557,"input_tokens":3273,"output_tokens":459,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112410':14A,17A '-2026':13A,16A '15.8.2':73C '26.7.2':76C '27.2':70C 'address':57C 'appl':1A,19B 'apple-devic':18B 'attack':8A,41B,79C 'bug':27B 'caus':43B,81C 'crash':9A,51B 'cve':12A,15A 'devic':20B 'doubl':3A,24B,53C 'fix':31B,65C 'free':4A,25B,54C 'gate':69C 'golden':68C 'improv':33B,59C 'infrastructur':21B 'issu':55C,63C 'let':5A 'maco':2A,22B,29B,67C,71C,74C 'manag':35B,61C 'may':80C 'memori':26B,34B,60C 'process':11A,46B,84C 'releas':38B 'remot':7A,40B,78C 'sequoia':72C 'sever':37B 'taho':75C 'termin':47B,85C 'unexpect':45B,83C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running an unpatched macOS release is potentially affected, as the sources describe a remote trigger causing a process crash. The sources do not say which services or components are reachable remotely, so unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:30+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112410","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112410","severity":null,"published_at":"2026-10-26T21:17:30+00:00","modified_at":"2026-10-26T21:17:30+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","fetched_at":"2026-10-26T21:20:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}