{"id":"CVE-2026-112451","kind":"vulnerability","aliases":["CVE-2026-112451"],"related":[],"title":"macOS: out-of-bounds read lets remote attacker crash system or leak memory","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service or disclose process memory.","summary":"An out-of-bounds read in macOS was fixed with better bounds checking. A remote attacker may be able to crash a process or read process memory.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["fully-patched-macos"],"how_to_check":"- Check the installed macOS version under Apple menu > About This Mac, or run `sw_vers -productVersion` in Terminal.\n- Compare against the fixed builds: macOS Golden Gate `27.2`, macOS Sequoia `15.8.2`, macOS Tahoe `26.7.2`.","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), whichever matches the installed major release.","status":"open","published_at":"2026-10-26T21:17:34+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","triaged_at":"2026-10-26T21:31:32+00:00","updated_at":"2026-10-26T21:31:32+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:31:32Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), whichever matches the installed major release.","reach":"unknown","title":"macOS: out-of-bounds read lets remote attacker crash system or leak memory","impact":"medium","summary":"An out-of-bounds read in macOS was fixed with better bounds checking. A remote attacker may be able to crash a process or read process memory.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Remote attacker crashes a process or reads process memory.","analyst_note":"Check Apple security notes for the affected component, attack vector and whether user interaction is needed; sources only give NVD id.","how_to_check":"- Check the installed macOS version under Apple menu > About This Mac, or run `sw_vers -productVersion` in Terminal.\n- Compare against the fixed builds: macOS Golden Gate `27.2`, macOS Sequoia `15.8.2`, macOS Tahoe `26.7.2`.","needs_analyst":true,"not_affected_if":["fully-patched-macos"],"who_is_affected":"Mac machines running macOS releases older than the fixed builds are in scope. The sources do not name the specific component or the data path that reaches the flawed code, so unknown whether particular configurations or services are more exposed. Teams that only run fully patched macOS builds can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000612,"input_tokens":3294,"output_tokens":565,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112451':17A,20A '-2026':16A,19A '15.8.2':77C '26.7.2':80C '27.2':74C 'abl':45B,86C 'address':61C 'appl':22B 'apple-devic':21B 'attack':9A,42B,83C 'better':37B 'bound':5A,30B,38B,58C,64C 'caus':88C 'check':39B,65C 'crash':10A,47B 'cve':15A,18A 'denial':91C 'denial-of-servic':90C 'devic':23B 'disclos':95C 'fix':35B,69C 'gate':73C 'golden':72C 'improv':63C 'infrastructur':24B 'issu':67C 'leak':13A 'let':7A 'maco':1A,25B,33B,71C,75C,78C 'may':43B,84C 'memori':14A,53B,97C 'out-of-bound':2A,27B,55C 'process':49B,52B,96C 'read':6A,31B,51B,59C 'remot':8A,41B,82C 'sequoia':76C 'servic':93C 'system':11A 'taho':79C","nicknames":[],"mitigations":[],"who_affected":"Mac machines running macOS releases older than the fixed builds are in scope. The sources do not name the specific component or the data path that reaches the flawed code, so unknown whether particular configurations or services are more exposed. Teams that only run fully patched macOS builds can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:34+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112451","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112451","severity":null,"published_at":"2026-10-26T21:17:34+00:00","modified_at":"2026-10-26T21:17:34+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","fetched_at":"2026-10-26T21:20:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}