{"id":"CVE-2026-112552","kind":"vulnerability","aliases":["CVE-2026-112552"],"related":[],"title":"macOS: out-of-bounds write from a network file server crashes the system","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with control of a network file server may be able to cause unexpected system termination.","summary":"An out-of-bounds write in macOS can be triggered by a malicious network file server, causing the system to terminate unexpectedly. The fix is included in macOS Golden Gate 27.2, macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","mac-workstations","macos","network-file-shares"],"not_affected_if":["no-network-file-shares"],"how_to_check":"- Run `sw_vers -productVersion` to see the installed macOS version and compare it with the fixed versions.\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), depending on the installed release.","status":"open","published_at":"2026-10-26T21:17:48+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:27:59+00:00","updated_at":"2026-10-26T21:27:59+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:27:59Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), depending on the installed release.","reach":"network","title":"macOS: out-of-bounds write from a network file server crashes the system","impact":"low","summary":"An out-of-bounds write in macOS can be triggered by a malicious network file server, causing the system to terminate unexpectedly. The fix is included in macOS Golden Gate 27.2, macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","mac-workstations","network-file-shares"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker-controlled file server crashes the Mac unexpectedly.","analyst_note":"Confirm the affected file-sharing protocol and whether a crash-only impact holds; check Apple's security notes for the CVE-2026-112552 entry.","how_to_check":"- Run `sw_vers -productVersion` to see the installed macOS version and compare it with the fixed versions.\n- unknown","needs_analyst":true,"not_affected_if":["no-network-file-shares"],"who_is_affected":"Mac machines that connect to network file servers, since the flaw is triggered by a server the attacker controls. Machines that never mount network file shares are unlikely to be exposed. The sources do not say which file-sharing protocols are involved.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000606,"input_tokens":3296,"output_tokens":552,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112552':17A,20A '-2026':16A,19A '15.8.2':64B,93C '26.7.2':68B,96C '27.2':61B,90C 'abl':108C 'address':77C 'attack':98C 'bound':5A,34B,73C,80C 'caus':47B,110C 'check':81C 'control':100C 'crash':12A 'cve':15A,18A 'file':10A,28B,45B,104C 'fix':54B,85C 'gate':60B,89C 'golden':59B,88C 'improv':79C 'includ':56B 'infrastructur':21B 'issu':75C,83C 'mac':23B 'mac-workst':22B 'maco':1A,25B,37B,58B,62B,66B,87C,91C,94C 'malici':43B 'may':106C 'network':9A,27B,44B,103C 'network-file-shar':26B 'out-of-bound':2A,31B,70C 'sequoia':63B,92C 'server':11A,46B,105C 'share':29B 'system':14A,49B,112C 'taho':67B,95C 'termin':51B,113C 'trigger':40B 'unexpect':52B,111C 'workstat':24B 'write':6A,35B,74C","nicknames":[],"mitigations":[],"who_affected":"Mac machines that connect to network file servers, since the flaw is triggered by a server the attacker controls. Machines that never mount network file shares are unlikely to be exposed. The sources do not say which file-sharing protocols are involved.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:48+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112552","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112552","severity":null,"published_at":"2026-10-26T21:17:48+00:00","modified_at":"2026-10-26T21:17:48+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}