Live › vulnerability › CVE-2026-112462
Go to dashboardApple fixed a permissions issue in macOS that let a malicious application bypass Privacy preferences controls. An attacker running code as a local app could reach data the user had blocked the app from accessing.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs running macOS Golden Gate, Sequoia or Tahoe before the fixed builds are affected. The sources do not say which earlier builds are vulnerable, and do not describe the exact Privacy preferences categories bypassed. Managed fleets that already auto-apply Apple security updates can treat this as routine.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed versions listed below27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to bypass Privacy preferences.
This page as .md · .json · in your agent: get_signal("CVE-2026-112462")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.