{"id":"CVE-2026-112532","kind":"vulnerability","aliases":["CVE-2026-112532"],"related":[],"title":"Apple macOS: improved memory handling fixes kernel memory corruption from apps","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.","summary":"An app on macOS can trigger a memory handling flaw that causes unexpected system termination or corrupts kernel memory. The sources do not say how the flaw is reached or whether it leads to code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":[],"how_to_check":"- Run `sw_vers -productVersion` and compare the result with the fixed releases listed below.\n- unknown for any other check; the sources do not give one.","fix":"- Update macOS Golden Gate to `27.2` or later.\n- Update macOS Sequoia to `15.8.2` or later.\n- Update macOS Tahoe to `26.7.2` or later.","status":"open","published_at":"2026-10-26T21:17:45+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:28:17+00:00","updated_at":"2026-10-26T21:28:17+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:28:17Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS Golden Gate to `27.2` or later.\n- Update macOS Sequoia to `15.8.2` or later.\n- Update macOS Tahoe to `26.7.2` or later.","reach":"local","title":"Apple macOS: improved memory handling fixes kernel memory corruption from apps","impact":"high","summary":"An app on macOS can trigger a memory handling flaw that causes unexpected system termination or corrupts kernel memory. The sources do not say how the flaw is reached or whether it leads to code execution.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app corrupts kernel memory or crashes the system","analyst_note":"Check Apple's security notes for these macOS releases to confirm the attack path, whether code execution is possible, and any CVSS score; the NVD entry here has no severity.","how_to_check":"- Run `sw_vers -productVersion` and compare the result with the fixed releases listed below.\n- unknown for any other check; the sources do not give one.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Machines running macOS releases older than the fixed versions listed above. The sources do not describe any extra configuration or role that makes a machine exposed, so treat all unpatched macOS installs as in scope. unknown for whether managed or non-default setups are excluded.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000597,"input_tokens":3279,"output_tokens":539,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112532':14A,17A '-2026':13A,16A '15.8.2':78C '26.7.2':81C '27.2':75C 'abl':86C 'address':62C 'app':11A,24B,83C 'appl':1A,19B 'apple-devic':18B 'caus':34B,88C 'code':57B 'corrupt':9A,39B,93C 'cve':12A,15A 'devic':20B 'execut':58B 'fix':6A,70C 'flaw':32B,49B 'gate':74C 'golden':73C 'handl':5A,31B,66C 'improv':3A,64C 'infrastructur':21B 'issu':60C,68C 'kernel':7A,40B,94C 'lead':55B 'maco':2A,22B,26B,72C,76C,79C 'may':84C 'memori':4A,8A,30B,41B,65C,95C 'reach':51B 'say':46B 'sequoia':77C 'sourc':43B 'system':36B,90C 'taho':80C 'termin':37B,91C 'trigger':28B 'unexpect':35B,89C 'whether':53B","nicknames":[],"mitigations":[],"who_affected":"Machines running macOS releases older than the fixed versions listed above. The sources do not describe any extra configuration or role that makes a machine exposed, so treat all unpatched macOS installs as in scope. unknown for whether managed or non-default setups are excluded.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:45+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112532","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112532","severity":null,"published_at":"2026-10-26T21:17:45+00:00","modified_at":"2026-10-26T21:17:45+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}