{"id":"CVE-2026-112508","kind":"vulnerability","aliases":["CVE-2026-112508"],"related":[],"title":"Apple macOS: out-of-bounds read lets an app crash the system or read kernel memory","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.","summary":"An out-of-bounds read in macOS lets a malicious app cause the system to terminate unexpectedly or read kernel memory. Apple fixed it with improved bounds checking in the listed macOS releases.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","infrastructure","macos"],"not_affected_if":["already-patched-macos"],"how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed versions.\n- unknown for any other check, the sources do not say.","fix":"- Update macOS Tahoe to `26.7.2` or later.\n- Update macOS Sequoia to `15.8.2` or later.\n- Update macOS Golden Gate to `27.2` or later.","status":"open","published_at":"2026-10-26T21:17:42+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:29:39+00:00","updated_at":"2026-10-26T21:29:39+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T21:29:39Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS Tahoe to `26.7.2` or later.\n- Update macOS Sequoia to `15.8.2` or later.\n- Update macOS Golden Gate to `27.2` or later.","reach":"local","title":"Apple macOS: out-of-bounds read lets an app crash the system or read kernel memory","impact":"high","summary":"An out-of-bounds read in macOS lets a malicious app cause the system to terminate unexpectedly or read kernel memory. Apple fixed it with improved bounds checking in the listed macOS releases.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","endpoints"],"confidence":0.6,"needs_auth":"unknown","worst_case":"A local app reads kernel memory or crashes the whole system.","analyst_note":"Find the Apple security advisory for CVE-2026-112508 to confirm the affected component, the attack prerequisites and whether kernel memory disclosure is confirmed.","how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed versions.\n- unknown for any other check, the sources do not say.","needs_analyst":true,"not_affected_if":["already-patched-macos"],"who_is_affected":"Any Mac running a macOS release older than the fixed versions is in scope, since the flaw is in the operating system itself. The sources do not say which hardware or configurations are affected beyond this, so unknown for narrower scoping. Teams with Macs on managed fleets should push the updates through their normal MDM process.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000615,"input_tokens":3290,"output_tokens":573,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112508':20A,23A '-2026':19A,22A '15.8.2':85C '26.7.2':88C '27.2':82C 'abl':93C 'address':69C 'app':10A,39B,90C 'appl':1A,24B,50B 'bound':6A,32B,55B,66C,72C 'caus':40B,95C 'check':56B,73C 'crash':11A 'cve':18A,21A 'endpoint':25B 'fix':51B,77C 'gate':81C 'golden':80C 'improv':54B,71C 'infrastructur':26B 'issu':75C 'kernel':16A,48B,101C 'let':8A,36B 'list':59B 'maco':2A,27B,35B,60B,79C,83C,86C 'malici':38B 'may':91C 'memori':17A,49B,102C 'out-of-bound':3A,29B,63C 'read':7A,15A,33B,47B,67C,100C 'releas':61B 'sequoia':84C 'system':13A,42B,97C 'taho':87C 'termin':44B,98C 'unexpect':45B,96C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running a macOS release older than the fixed versions is in scope, since the flaw is in the operating system itself. The sources do not say which hardware or configurations are affected beyond this, so unknown for narrower scoping. Teams with Macs on managed fleets should push the updates through their normal MDM process.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:42+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112508","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112508","severity":null,"published_at":"2026-10-26T21:17:42+00:00","modified_at":"2026-10-26T21:17:42+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}