Live › vulnerability › CVE-2026-112542
Go to dashboardA permissions issue in macOS allowed a malicious app to intercept network traffic. Apple fixed it by adding restrictions in the listed macOS builds.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs running macOS versions earlier than the fixed builds. The sources do not say which apps or network configurations are needed to trigger it, so the exposure beyond the OS version is unknown. Systems already on the fixed builds are not affected.
No product ranges from the sources yet.
sw_vers -productVersion27.2 (Golden Gate), 15.8.2 (Sequoia), 26.7.2 (Tahoe)27.2 (Golden Gate), 15.8.2 (Sequoia) or 26.7.2 (Tahoe), or later, via System Settings > General > Software UpdateEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to intercept network traffic.
This page as .md · .json · in your agent: get_signal("CVE-2026-112542")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.