Live › vulnerability › CVE-2026-112555
Go to dashboardA validation flaw in macOS was fixed with improved input sanitization. A malicious app can use it to break out of its sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Mac running an affected macOS release can be exposed to a malicious app that is already installed and running. The sources do not say which earlier builds are affected beyond the fixed versions, so unknown for finer scope. Machines already on the fixed versions are not affected.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed builds listed in the advisory.27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe) via Software Update.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
This page as .md · .json · in your agent: get_signal("CVE-2026-112555")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.