{"id":"CVE-2026-112478","kind":"vulnerability","aliases":["CVE-2026-112478"],"related":[],"title":"Apple macOS: out-of-bounds read lets an app crash the system or read kernel memory","description":"An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.","summary":"An out-of-bounds read in macOS lets a local app cause unexpected system termination or read kernel memory. Apple fixed it by removing the vulnerable code in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["patched-macos"],"how_to_check":"- Run `sw_vers -productVersion` and compare it with `27.2` (Golden Gate) or `26.7.2` (Tahoe)\n- unknown for other checks; the sources do not say","fix":"- Update macOS to `27.2` (Golden Gate) or `26.7.2` (Tahoe) or later","status":"open","published_at":"2026-10-26T21:17:38+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","triaged_at":"2026-10-26T21:30:04+00:00","updated_at":"2026-10-26T21:30:04+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:30:04Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate) or `26.7.2` (Tahoe) or later","reach":"local","title":"Apple macOS: out-of-bounds read lets an app crash the system or read kernel memory","impact":"medium","summary":"An out-of-bounds read in macOS lets a local app cause unexpected system termination or read kernel memory. Apple fixed it by removing the vulnerable code in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Kernel memory is read and the system can be terminated unexpectedly","analyst_note":"Check Apple's security notes for CVE-2026-112478 for affected versions, required privileges and whether the kernel read is exploitable beyond a crash.","how_to_check":"- Run `sw_vers -productVersion` and compare it with `27.2` (Golden Gate) or `26.7.2` (Tahoe)\n- unknown for other checks; the sources do not say","needs_analyst":true,"not_affected_if":["patched-macos"],"who_is_affected":"Macs running macOS versions older than Golden Gate 27.2 or Tahoe 26.7.2. The sources do not say which configurations or hardware are needed to trigger it, and they do not name a specific data path.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000597,"input_tokens":3283,"output_tokens":537,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112478':20A,23A '-2026':19A,22A '26.7.2':65B,91C '27.2':61B,88C 'abl':96C 'address':74C 'app':10A,40B,93C 'appl':1A,25B,49B 'apple-devic':24B 'bound':6A,33B,70C 'caus':41B,98C 'code':56B,79C 'crash':11A 'cve':18A,21A 'devic':26B 'fix':50B,83C 'gate':60B,87C 'golden':59B,86C 'infrastructur':27B 'issu':72C,81C 'kernel':16A,47B,104C 'let':8A,37B 'local':39B 'maco':2A,28B,36B,58B,63B,85C,89C 'may':94C 'memori':17A,48B,105C 'out-of-bound':3A,30B,67C 'read':7A,15A,34B,46B,71C,103C 'remov':53B,76C 'system':13A,43B,100C 'taho':64B,90C 'termin':44B,101C 'unexpect':42B,99C 'vulner':55B,78C","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS versions older than Golden Gate 27.2 or Tahoe 26.7.2. The sources do not say which configurations or hardware are needed to trigger it, and they do not name a specific data path.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:38+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112478","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112478","severity":null,"published_at":"2026-10-26T21:17:38+00:00","modified_at":"2026-10-26T21:17:38+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","fetched_at":"2026-10-26T21:20:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}