Live › vulnerability › CVE-2026-112526
Go to dashboardA buffer overflow in a macOS component was fixed with improved bounds checking in several macOS releases. A remote attacker may be able to cause an unexpected app termination, which is a crash rather than code execution as described.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs running the macOS versions listed before the fixed releases are exposed. The sources do not name the affected component or the data path that triggers the overflow, so it is unknown which apps or configurations are most at risk. Machines already on the fixed builds can skip it.
No product ranges from the sources yet.
sw_vers and compare the ProductVersion to the fixed builds: macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe), whichever matches the installed major release.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination.
This page as .md · .json · in your agent: get_signal("CVE-2026-112526")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.