Live › vulnerability › CVE-2026-112478
Go to dashboardAn out-of-bounds read in macOS lets a local app cause unexpected system termination or read kernel memory. Apple fixed it by removing the vulnerable code in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs running macOS versions older than Golden Gate 27.2 or Tahoe 26.7.2. The sources do not say which configurations or hardware are needed to trigger it, and they do not name a specific data path.
No product ranges from the sources yet.
sw_vers -productVersion and compare it with 27.2 (Golden Gate) or 26.7.2 (Tahoe)27.2 (Golden Gate) or 26.7.2 (Tahoe) or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-112478")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.