{"id":"CVE-2026-112526","kind":"vulnerability","aliases":["CVE-2026-112526"],"related":[],"title":"macOS: buffer overflow lets a remote attacker crash apps","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination.","summary":"A buffer overflow in a macOS component was fixed with improved bounds checking in several macOS releases. A remote attacker may be able to cause an unexpected app termination, which is a crash rather than code execution as described.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["fixed-macos-build"],"how_to_check":"- Run `sw_vers` and compare the ProductVersion to the fixed builds: macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.\n- Check Software Update in System Settings for pending macOS security updates.","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe), whichever matches the installed major release.","status":"open","published_at":"2026-10-26T21:17:44+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:28:21+00:00","updated_at":"2026-10-26T21:28:21+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-26T21:28:21Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe), whichever matches the installed major release.","reach":"network","title":"macOS: buffer overflow lets a remote attacker crash apps","impact":"low","summary":"A buffer overflow in a macOS component was fixed with improved bounds checking in several macOS releases. A remote attacker may be able to cause an unexpected app termination, which is a crash rather than code execution as described.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.4,"needs_auth":"unknown","worst_case":"Remote attacker crashes an app; code execution not stated","analyst_note":"Check Apple's security release notes for CVE-2026-112526 to name the affected component and confirm whether code execution is possible beyond the crash described.","how_to_check":"- Run `sw_vers` and compare the ProductVersion to the fixed builds: macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.\n- Check Software Update in System Settings for pending macOS security updates.","needs_analyst":true,"not_affected_if":["fixed-macos-build"],"who_is_affected":"Macs running the macOS versions listed before the fixed releases are exposed. The sources do not name the affected component or the data path that triggers the overflow, so it is unknown which apps or configurations are most at risk. Machines already on the fixed builds can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000616,"input_tokens":3283,"output_tokens":576,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112526':12A,15A '-2026':11A,14A '15.8.2':80C '26.7.2':83C '27.2':77C 'abl':43B,89C 'address':64C 'app':9A,48B,93C 'appl':17B 'apple-devic':16B 'attack':7A,40B,86C 'bound':32B,67C 'buffer':2A,22B,61C 'caus':45B,91C 'check':33B,68C 'code':56B 'compon':27B 'crash':8A,53B 'cve':10A,13A 'describ':59B 'devic':18B 'execut':57B 'fix':29B,72C 'gate':76C 'golden':75C 'improv':31B,66C 'infrastructur':19B 'issu':70C 'let':4A 'maco':1A,20B,26B,36B,74C,78C,81C 'may':41B,87C 'overflow':3A,23B,62C 'rather':54B 'releas':37B 'remot':6A,39B,85C 'sequoia':79C 'sever':35B 'taho':82C 'termin':49B,94C 'unexpect':47B,92C","nicknames":[],"mitigations":[],"who_affected":"Macs running the macOS versions listed before the fixed releases are exposed. The sources do not name the affected component or the data path that triggers the overflow, so it is unknown which apps or configurations are most at risk. Machines already on the fixed builds can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:44+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112526","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112526","severity":null,"published_at":"2026-10-26T21:17:44+00:00","modified_at":"2026-10-26T21:17:44+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}