Live › vulnerability › CVE-2026-112543
Go to dashboardA race condition in macOS let a malicious app break out of its sandbox, according to the NVD entry. Apple fixed it with additional validation in the listed macOS releases.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs running macOS releases older than the fixed versions are affected. The sources do not say which earlier releases are vulnerable beyond that, or whether any configuration matters. Systems already on the fixed releases can skip it.
No product ranges from the sources yet.
sw_vers -productVersion on each Mac and compare against the fixed versions.27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe), or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
This page as .md · .json · in your agent: get_signal("CVE-2026-112543")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.