Live › vulnerability › CVE-2026-112550
Go to dashboardA type confusion bug in macOS memory handling can be triggered by an app, per the Apple advisory text. The sources say an attacker can cause a denial of service, not code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Mac fleets and developer machines on the affected macOS branches are in scope, since the flaw is in the operating system. The sources do not describe specific configurations or features that widen exposure, so any unpatched Mac on those branches should be considered in scope. Machines already on a fixed release can skip it.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed builds listed in the advisory.27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe), per the fixed versions named in the description.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause a denial-of-service.
This page as .md · .json · in your agent: get_signal("CVE-2026-112550")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.