{"id":"CVE-2026-112519","kind":"vulnerability","aliases":["CVE-2026-112519"],"related":[],"title":"macOS: integer overflow in VNC client lets a malicious server crash it","description":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Connecting to a malicious VNC server may cause a denial-of-service.","summary":"An integer overflow in macOS's VNC connection handling can be triggered when a Mac connects to a malicious VNC server. The sources say the result is a denial of service, meaning the connecting process or service can be made to crash or stop responding.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","macos","screen-sharing","vnc"],"not_affected_if":["no-vnc-client-use"],"how_to_check":"- `sw_vers -productVersion` to read the installed macOS version and compare it with the fixed releases\n- Check System Settings > General > Software Update for pending updates\n- unknown whether the sources give a specific check for VNC use","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe) or later\n- Avoid connecting to untrusted VNC servers until patched","status":"open","published_at":"2026-10-26T21:17:43+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:29:30+00:00","updated_at":"2026-10-26T21:29:30+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T21:29:30Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe) or later\n- Avoid connecting to untrusted VNC servers until patched","reach":"network","title":"macOS: integer overflow in VNC client lets a malicious server crash it","impact":"low","summary":"An integer overflow in macOS's VNC connection handling can be triggered when a Mac connects to a malicious VNC server. The sources say the result is a denial of service, meaning the connecting process or service can be made to crash or stop responding.","category":"infrastructure","nicknames":[],"who_cares":["macos","vnc","screen-sharing"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Denial of service: the VNC client crashes or hangs","analyst_note":"Check Apple's security notes for CVE-2026-112519 to confirm which VNC component is affected and whether the trigger needs user action.","how_to_check":"- `sw_vers -productVersion` to read the installed macOS version and compare it with the fixed releases\n- Check System Settings > General > Software Update for pending updates\n- unknown whether the sources give a specific check for VNC use","needs_analyst":true,"not_affected_if":["no-vnc-client-use"],"who_is_affected":"Macs that connect to VNC servers, such as for Screen Sharing or remote desktop use, are the exposed systems, since the flaw is triggered by a malicious server the client connects to. Machines that do not use VNC client connections are less exposed. The sources do not say whether the flaw is reachable by default.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000625,"input_tokens":3281,"output_tokens":594,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112519':14A,17A '-2026':13A,16A '15.8.2':89C '26.7.2':92C '27.2':86C 'address':73C 'caus':100C 'client':6A 'connect':31B,39B,57B,93C 'crash':11A,65B 'cve':12A,15A 'denial':52B,103C 'denial-of-servic':102C 'fix':81C 'gate':85C 'golden':84C 'handl':32B 'improv':75C 'infrastructur':18B 'input':76C 'integ':2A,25B,70C 'issu':79C 'let':7A 'mac':38B 'maco':1A,19B,28B,83C,87C,90C 'made':63B 'malici':9A,42B,96C 'may':99C 'mean':55B 'overflow':3A,26B,71C 'process':58B 'respond':68B 'result':49B 'say':47B 'screen':21B 'screen-shar':20B 'sequoia':88C 'server':10A,44B,98C 'servic':54B,60B,105C 'share':22B 'sourc':46B 'stop':67B 'taho':91C 'trigger':35B 'valid':77C 'vnc':5A,23B,30B,43B,97C","nicknames":[],"mitigations":[],"who_affected":"Macs that connect to VNC servers, such as for Screen Sharing or remote desktop use, are the exposed systems, since the flaw is triggered by a malicious server the client connects to. Machines that do not use VNC client connections are less exposed. The sources do not say whether the flaw is reachable by default.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112519","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112519","severity":null,"published_at":"2026-10-26T21:17:43+00:00","modified_at":"2026-10-26T21:17:43+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}