{"id":"CVE-2026-112543","kind":"vulnerability","aliases":["CVE-2026-112543"],"related":[],"title":"macOS: race condition lets a malicious app escape its sandbox","description":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.","summary":"A race condition in macOS let a malicious app break out of its sandbox, according to the NVD entry. Apple fixed it with additional validation in the listed macOS releases.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["fixed-macos-version"],"how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed versions.\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe), or later.","status":"open","published_at":"2026-10-26T21:17:47+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:28:06+00:00","updated_at":"2026-10-26T21:28:06+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:28:06Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe), or later.","reach":"local","title":"macOS: race condition lets a malicious app escape its sandbox","impact":"high","summary":"A race condition in macOS let a malicious app break out of its sandbox, according to the NVD entry. Apple fixed it with additional validation in the listed macOS releases.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Malicious app escapes sandbox and reaches broader system resources.","analyst_note":"Check Apple's security notes for the affected version range and any exploitation details; the NVD entry gives only the fixed versions.","how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed versions.\n- unknown","needs_analyst":true,"not_affected_if":["fixed-macos-version"],"who_is_affected":"Macs running macOS releases older than the fixed versions are affected. The sources do not say which earlier releases are vulnerable beyond that, or whether any configuration matters. Systems already on the fixed releases can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000566,"input_tokens":3269,"output_tokens":478,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112543':13A,16A '-2026':12A,15A '15.8.2':71C '26.7.2':74C '27.2':68C 'abl':80C 'accord':36B 'addit':45B,58C 'address':56C 'app':7A,30B,77C 'appl':18B,41B 'apple-devic':17B 'break':31B,82C 'condit':3A,24B,54C 'cve':11A,14A 'devic':19B 'entri':40B 'escap':8A 'fix':42B,63C 'gate':67C 'golden':66C 'infrastructur':20B 'issu':61C 'let':4A,27B 'list':49B 'maco':1A,21B,26B,50B,65C,69C,72C 'malici':6A,29B,76C 'may':78C 'nvd':39B 'race':2A,23B,53C 'releas':51B 'sandbox':10A,35B,86C 'sequoia':70C 'taho':73C 'valid':46B,59C","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS releases older than the fixed versions are affected. The sources do not say which earlier releases are vulnerable beyond that, or whether any configuration matters. Systems already on the fixed releases can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:47+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112543","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112543","severity":null,"published_at":"2026-10-26T21:17:47+00:00","modified_at":"2026-10-26T21:17:47+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}