{"id":"CVE-2026-112505","kind":"vulnerability","aliases":["CVE-2026-112505"],"related":[],"title":"Apple macOS Screen Sharing: out-of-bounds write lets a peer corrupt memory","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to corrupt process memory.","summary":"A bounds-checking flaw in macOS Screen Sharing lets a malicious peer write past a buffer and corrupt process memory. Apple fixed it in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","macos","screen-sharing","self-hosted"],"not_affected_if":["patched-macos","screen-sharing-off"],"how_to_check":"- Run `sw_vers -productVersion` and compare against `27.2`, `15.8.2` and `26.7.2` for the matching macOS line\n- Check whether Screen Sharing is enabled in System Settings under General, Sharing\n- Confirm the fixed build with the sources, since the NVD entry gives no extra detail","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe) via Software Update\n- Turn off Screen Sharing on machines that do not need it until patched","status":"open","published_at":"2026-10-26T21:17:41+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","triaged_at":"2026-10-26T21:29:44+00:00","updated_at":"2026-10-26T21:29:44+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:29:44Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe) via Software Update\n- Turn off Screen Sharing on machines that do not need it until patched","reach":"network","title":"Apple macOS Screen Sharing: out-of-bounds write lets a peer corrupt memory","impact":"high","summary":"A bounds-checking flaw in macOS Screen Sharing lets a malicious peer write past a buffer and corrupt process memory. Apple fixed it in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","screen-sharing","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker corrupts memory in a Screen Sharing process, possibly running code","analyst_note":"Check Apple's security notes for the CVE-2026-112505 entry to confirm the attack preconditions, whether code execution is shown, and the exact fixed builds.","how_to_check":"- Run `sw_vers -productVersion` and compare against `27.2`, `15.8.2` and `26.7.2` for the matching macOS line\n- Check whether Screen Sharing is enabled in System Settings under General, Sharing\n- Confirm the fixed build with the sources, since the NVD entry gives no extra detail","needs_analyst":true,"not_affected_if":["screen-sharing-off","patched-macos"],"who_is_affected":"Macs running a macOS release older than the fixed builds where Screen Sharing is enabled and reachable by other hosts. Machines with Screen Sharing off, or only used locally, have a much smaller exposure. The sources do not say which Screen Sharing configuration is required for an attack.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00067,"input_tokens":3296,"output_tokens":680,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112505':17A,20A '-2026':16A,19A '15.8.2':59B,87C '26.7.2':62B,90C '27.2':57B,84C 'abl':98C 'address':71C 'appl':1A,50B 'bound':8A,31B,67C,74C 'bounds-check':30B 'buffer':45B 'check':32B,75C 'corrupt':13A,47B,100C 'cve':15A,18A 'fix':51B,79C 'flaw':33B 'gate':56B,83C 'golden':55B,82C 'host':28B 'improv':73C 'infrastructur':21B 'issu':69C,77C 'let':10A,38B 'maco':2A,22B,35B,54B,81C,85C,88C 'malici':40B,92C 'may':96C 'memori':14A,49B,102C 'out-of-bound':5A,64C 'past':43B 'peer':12A,41B,95C 'process':48B,101C 'screen':3A,24B,36B,93C 'screen-shar':23B 'self':27B 'self-host':26B 'sequoia':58B,86C 'share':4A,25B,37B,94C 'taho':61B,89C 'write':9A,42B,68C","nicknames":[],"mitigations":[],"who_affected":"Macs running a macOS release older than the fixed builds where Screen Sharing is enabled and reachable by other hosts. Machines with Screen Sharing off, or only used locally, have a much smaller exposure. The sources do not say which Screen Sharing configuration is required for an attack.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:41+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112505","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112505","severity":null,"published_at":"2026-10-26T21:17:41+00:00","modified_at":"2026-10-26T21:17:41+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","fetched_at":"2026-10-26T21:20:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}