Live › vulnerability › CVE-2026-112493
Go to dashboardA downgrade issue in macOS allowed an app to gain root privileges, and Apple fixed it with additional version checks. An attacker who can run a malicious app on the Mac can end up with root control of the system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Mac running the unpatched macOS builds is affected, since the flaw is in the operating system and the sources describe a local app gaining root. Managed fleets should prioritise machines that run apps from untrusted sources. Systems already on the fixed builds can skip it.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed versions listed in the fix field27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A downgrade issue was addressed with additional version checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-112493")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.