Live › vulnerability › CVE-2026-112427
Go to dashboardAn authentication state-management flaw in macOS allows a remote attacker to potentially execute arbitrary code on affected Macs. Apple fixed it in macOS Golden Gate 27.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Mac running a macOS release earlier than Golden Gate 27.2 may be affected, per the NVD description. The sources do not describe the specific service or data path that is reachable, so the exact exposure is unknown. Machines already on 27.2 or later are not affected by this issue.
No product ranges from the sources yet.
sw_vers -productVersion in a terminal.27.2; anything earlier is unpatched for this issue.27.2 or later via System Settings > General > Software Update.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-112427")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.