Live › vulnerability › CVE-2026-112459
Go to dashboardA race condition in Apple's operating systems lets a local app crash the system or corrupt kernel memory. Apple fixed it in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2 and watchOS 27.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Apple device running an operating system version before 27.2 is affected. The sources only describe an app triggering the flaw, so devices running only trusted software are at lower practical risk, but the fix still applies to all of them. Teams that manage Apple fleets should treat this as a standard OS update.
No product ranges from the sources yet.
sw_vers on macOS.27.2 or later.27.2 or later.27.2 or later.27.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-112459")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.