Live › vulnerability › CVE-2026-112457
Go to dashboardA double free bug in macOS memory handling can be triggered by an attacker on the local network. The sources say it can cause unexpected system termination or corrupt process memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs running macOS releases older than the fixed versions named in the advisory. The sources say the attack comes from the local network, so machines on untrusted or shared networks are the most exposed. Systems already on the fixed builds can skip it.
No product ranges from the sources yet.
sw_vers -productVersion and compare with the fixed releases listed in the sources.27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe), as named in the advisory text.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-112457")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.