Live › vulnerability › CVE-2026-112519
Go to dashboardAn integer overflow in macOS's VNC connection handling can be triggered when a Mac connects to a malicious VNC server. The sources say the result is a denial of service, meaning the connecting process or service can be made to crash or stop responding.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs that connect to VNC servers, such as for Screen Sharing or remote desktop use, are the exposed systems, since the flaw is triggered by a malicious server the client connects to. Machines that do not use VNC client connections are less exposed. The sources do not say whether the flaw is reachable by default.
No product ranges from the sources yet.
sw_vers -productVersion to read the installed macOS version and compare it with the fixed releases27.2 (Golden Gate), 15.8.2 (Sequoia) or 26.7.2 (Tahoe) or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Connecting to a malicious VNC server may cause a denial-of-service.
This page as .md · .json · in your agent: get_signal("CVE-2026-112519")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.