Live › vulnerability › CVE-2026-112539
Go to dashboardApple fixed a permissions flaw in macOS where a malicious app could access protected files. An attacker who gets a malicious app onto a Mac can read or write files that should be off limits to it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Mac running a macOS release older than the fixed versions. The sources do not say which configurations are most exposed. The attack needs a malicious app to be run on the machine first.
No product ranges from the sources yet.
sw_vers -productVersion on the Mac and compare the result with the fixed builds below27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe) or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to read or write to protected files.
This page as .md · .json · in your agent: get_signal("CVE-2026-112539")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.