Live › vulnerability › CVE-2026-112536
Go to dashboardAn out-of-bounds write flaw in macOS lets a local app crash the system or write kernel memory. Apple fixed it with better bounds checking in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Mac running an unpatched macOS release on one of the affected lines can be hit, since the flaw is reached by an app already running on the machine. Machines already on the fixed builds are not affected. The sources do not say whether a specific configuration or feature is required.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed versions 27.2, 15.8.2 and 26.7.2.27.2 (Golden Gate), 15.8.2 (Sequoia) or 26.7.2 (Tahoe), matching the installed release line.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-112536")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.