{"id":"CVE-2026-112447","kind":"vulnerability","aliases":["CVE-2026-112447"],"related":[],"title":"Apple macOS: authorization flaw lets an app bypass Privacy preferences","description":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Privacy preferences.","summary":"An authorization issue in macOS lets an app get around Privacy preference controls such as access to protected data. Apple fixed it with improved state management in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoint","macos","other"],"not_affected_if":["already-patched-macos"],"how_to_check":"- Run `sw_vers -productVersion` and compare the result with the fixed versions listed below\n- Check System Settings > General > Software Update for pending macOS updates","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), whichever matches your release line","status":"open","published_at":"2026-10-26T21:17:34+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","triaged_at":"2026-10-26T21:31:32+00:00","updated_at":"2026-10-26T21:31:32+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T21:31:32Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), whichever matches your release line","reach":"local","title":"Apple macOS: authorization flaw lets an app bypass Privacy preferences","impact":"medium","summary":"An authorization issue in macOS lets an app get around Privacy preference controls such as access to protected data. Apple fixed it with improved state management in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"other","nicknames":[],"who_cares":["macos","apple","endpoint"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app reads privacy-protected data without the user's consent","analyst_note":"Check Apple's security notes for CVE-2026-112447 for the exact privacy categories bypassed and whether user interaction is needed.","how_to_check":"- Run `sw_vers -productVersion` and compare the result with the fixed versions listed below\n- Check System Settings > General > Software Update for pending macOS updates","needs_analyst":true,"not_affected_if":["already-patched-macos"],"who_is_affected":"Any Mac running an unpatched macOS release on the affected lines can be exposed, since the flaw sits in the operating system itself and not in a third-party package. Managed fleets should prioritise machines that run apps handling sensitive personal data. unknown whether any configuration removes the exposure before patching.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000608,"input_tokens":3272,"output_tokens":561,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112447':13A,16A '-2026':12A,15A '15.8.2':52B,76C '26.7.2':55B,79C '27.2':50B,73C 'abl':84C 'access':35B 'address':60C 'app':7A,27B,81C 'appl':1A,17B,39B 'around':29B 'author':3A,21B,57C 'bypass':8A,86C 'control':32B 'cve':11A,14A 'data':38B 'endpoint':18B 'fix':40B,68C 'flaw':4A 'gate':49B,72C 'get':28B 'golden':48B,71C 'improv':43B,62C 'issu':22B,58C,66C 'let':5A,25B 'maco':2A,19B,24B,47B,70C,74C,77C 'manag':45B,64C 'may':82C 'prefer':10A,31B,88C 'privaci':9A,30B,87C 'protect':37B 'sequoia':51B,75C 'state':44B,63C 'taho':54B,78C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running an unpatched macOS release on the affected lines can be exposed, since the flaw sits in the operating system itself and not in a third-party package. Managed fleets should prioritise machines that run apps handling sensitive personal data. unknown whether any configuration removes the exposure before patching.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:34+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112447","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112447","severity":null,"published_at":"2026-10-26T21:17:34+00:00","modified_at":"2026-10-26T21:17:34+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","fetched_at":"2026-10-26T21:20:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}