{"id":"CVE-2026-112510","kind":"vulnerability","aliases":["CVE-2026-112510"],"related":[],"title":"macOS: out-of-bounds write could let a remote attacker crash the system","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service.","summary":"Apple fixed an out-of-bounds write in macOS with improved bounds checking. A remote attacker may be able to cause a denial of service, according to the description.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["already-patched"],"how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions listed in the sources.\n- unknown for the affected component, since the sources do not name it.","fix":"- Update macOS Golden Gate to `27.2`, macOS Sequoia to `15.8.2`, or macOS Tahoe to `26.7.2`, as the advisory describes.","status":"open","published_at":"2026-10-26T21:17:42+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:29:39+00:00","updated_at":"2026-10-26T21:29:39+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:29:39Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS Golden Gate to `27.2`, macOS Sequoia to `15.8.2`, or macOS Tahoe to `26.7.2`, as the advisory describes.","reach":"unknown","title":"macOS: out-of-bounds write could let a remote attacker crash the system","impact":"low","summary":"Apple fixed an out-of-bounds write in macOS with improved bounds checking. A remote attacker may be able to cause a denial of service, according to the description.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Remote attacker crashes the affected macOS service or machine.","analyst_note":"Find the Apple security content page for CVE-2026-112510 to name the affected component and the trigger path.","how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions listed in the sources.\n- unknown for the affected component, since the sources do not name it.","needs_analyst":true,"not_affected_if":["already-patched"],"who_is_affected":"Mac machines running macOS releases older than the fixed versions named in the sources. The sources do not say which component or network service is involved, so unknown whether a default setup is reachable remotely.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000569,"input_tokens":3291,"output_tokens":480,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112510':17A,20A '-2026':16A,19A '15.8.2':80C '26.7.2':83C '27.2':77C 'abl':45B,89C 'accord':52B 'address':64C 'appl':22B,26B 'apple-devic':21B 'attack':11A,42B,86C 'bound':5A,32B,38B,60C,67C 'caus':47B,91C 'check':39B,68C 'could':7A 'crash':12A 'cve':15A,18A 'denial':49B,94C 'denial-of-servic':93C 'descript':55B 'devic':23B 'fix':27B,72C 'gate':76C 'golden':75C 'improv':37B,66C 'infrastructur':24B 'issu':62C,70C 'let':8A 'maco':1A,25B,35B,74C,78C,81C 'may':43B,87C 'out-of-bound':2A,29B,57C 'remot':10A,41B,85C 'sequoia':79C 'servic':51B,96C 'system':14A 'taho':82C 'write':6A,33B,61C","nicknames":[],"mitigations":[],"who_affected":"Mac machines running macOS releases older than the fixed versions named in the sources. The sources do not say which component or network service is involved, so unknown whether a default setup is reachable remotely.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:42+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112510","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112510","severity":null,"published_at":"2026-10-26T21:17:42+00:00","modified_at":"2026-10-26T21:17:42+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}