{"id":"CVE-2026-112576","kind":"vulnerability","aliases":["CVE-2026-112576"],"related":[],"title":"Apple iOS and macOS: copy-on-write memory flaw lets an app alter memory","description":"A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected changes to copy-on-write memory.","summary":"Apple reports a memory integrity issue in copy-on-write page handling across its operating systems. An app running on the device may be able to cause unexpected changes to copy-on-write memory.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","infrastructure","ios","ipados","macos","tvos","visionos","watchos"],"not_affected_if":["already-patched"],"how_to_check":"- Check the device version in Settings > General > About (iOS, iPadOS, visionOS, watchOS, tvOS) or run `sw_vers` on macOS\n- unknown for any other check, the sources do not say","fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`\n- Update tvOS, visionOS and watchOS to `27.2`","status":"open","published_at":"2026-10-26T21:17:51+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:39+00:00","updated_at":"2026-10-26T21:27:39+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-26T21:27:39Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`\n- Update tvOS, visionOS and watchOS to `27.2`","reach":"local","title":"Apple iOS and macOS: copy-on-write memory flaw lets an app alter memory","impact":"medium","summary":"Apple reports a memory integrity issue in copy-on-write page handling across its operating systems. An app running on the device may be able to cause unexpected changes to copy-on-write memory.","category":"infrastructure","nicknames":[],"who_cares":["apple","ios","ipados","macos","tvos","visionos","watchos"],"confidence":0.4,"needs_auth":"unknown","worst_case":"A local app can silently alter protected memory contents","analyst_note":"Check Apple security notes for this CVE to confirm exploitation status, required access and whether the flaw is reachable from a sandboxed app.","how_to_check":"- Check the device version in Settings > General > About (iOS, iPadOS, visionOS, watchOS, tvOS) or run `sw_vers` on macOS\n- unknown for any other check, the sources do not say","needs_analyst":true,"not_affected_if":["already-patched"],"who_is_affected":"Anyone running the listed Apple OS versions before the fixed releases is affected, since the flaw sits in the operating system rather than in a third-party app. The sources do not say which apps or configurations are needed to trigger it. unknown whether managed devices or non-default setups change exposure.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000641,"input_tokens":3370,"output_tokens":609,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112576':18A,21A '-2026':17A,20A '15.8.2':102C '26.7.2':87C,90C,105C '27.2':92C,95C,99C,107C,109C,111C 'abl':55B,116C 'across':43B 'address':71C 'alter':14A 'app':13A,48B,113C 'appl':1A,22B,30B 'caus':57B,118C 'chang':59B,120C 'copi':6A,38B,62B,77C,123C 'copy-on-writ':5A,37B,61B,76C,122C 'cve':16A,19A 'devic':52B 'fix':84C 'flaw':10A 'gate':98C 'golden':97C 'handl':42B,74C 'improv':73C 'infrastructur':23B 'integr':34B,68C 'io':2A,24B,86C,91C 'ipado':25B,89C,94C 'issu':35B,69C,82C 'let':11A 'maco':4A,26B,96C,100C,103C 'may':53B,114C 'memori':9A,15A,33B,65B,67C,126C 'oper':45B 'page':41B,80C 'report':31B 'run':49B 'sequoia':101C 'system':46B 'taho':104C 'tvos':27B,106C 'unexpect':58B,119C 'visiono':28B,108C 'watcho':29B,110C 'write':8A,40B,64B,79C,125C","nicknames":[],"mitigations":[],"who_affected":"Anyone running the listed Apple OS versions before the fixed releases is affected, since the flaw sits in the operating system rather than in a third-party app. The sources do not say which apps or configurations are needed to trigger it. unknown whether managed devices or non-default setups change exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:51+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112576","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112576","severity":null,"published_at":"2026-10-26T21:17:51+00:00","modified_at":"2026-10-26T21:17:51+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}