{"id":"CVE-2026-112531","kind":"vulnerability","aliases":["CVE-2026-112531"],"related":[],"title":"macOS: use-after-free lets an app crash the system","description":"A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.","summary":"A use-after-free bug in macOS memory handling can be triggered by an app, causing unexpected system termination. The sources describe the impact as a crash, with no code execution mentioned.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoints","infrastructure","macos"],"not_affected_if":[],"how_to_check":"- Run `sw_vers -productVersion` and compare with the fixed releases listed below.\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe) or later.","status":"open","published_at":"2026-10-26T21:17:45+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:28:16+00:00","updated_at":"2026-10-26T21:28:16+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:28:16Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe) or later.","reach":"local","title":"macOS: use-after-free lets an app crash the system","impact":"low","summary":"A use-after-free bug in macOS memory handling can be triggered by an app, causing unexpected system termination. The sources describe the impact as a crash, with no code execution mentioned.","category":"infrastructure","nicknames":[],"who_cares":["macos","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app crashes the whole system unexpectedly","analyst_note":"Check Apple's security notes for this CVE to confirm the trigger, whether code execution is possible, and the exact fixed build numbers.","how_to_check":"- Run `sw_vers -productVersion` and compare with the fixed releases listed below.\n- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Macs running macOS versions earlier than the fixed releases are affected. The sources do not say which configurations or app types are needed to trigger it, so unknown. Managed fleets should prioritize updates.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000556,"input_tokens":3273,"output_tokens":457,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112531':14A,17A '-2026':13A,16A '15.8.2':76C '26.7.2':79C '27.2':73C 'abl':84C 'address':60C 'app':8A,36B,81C 'bug':26B 'caus':37B,86C 'code':51B 'crash':9A,48B 'cve':12A,15A 'describ':43B 'endpoint':18B 'execut':52B 'fix':68C 'free':5A,25B,57C 'gate':72C 'golden':71C 'handl':30B 'impact':45B 'improv':62C 'infrastructur':19B 'issu':58C,66C 'let':6A 'maco':1A,20B,28B,70C,74C,77C 'manag':64C 'may':82C 'memori':29B,63C 'mention':53B 'sequoia':75C 'sourc':42B 'system':11A,39B,88C 'taho':78C 'termin':40B,89C 'trigger':33B 'unexpect':38B,87C 'use':3A,23B,55C 'use-after-fre':2A,22B","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS versions earlier than the fixed releases are affected. The sources do not say which configurations or app types are needed to trigger it, so unknown. Managed fleets should prioritize updates.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:45+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112531","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112531","severity":null,"published_at":"2026-10-26T21:17:45+00:00","modified_at":"2026-10-26T21:17:45+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}