{"id":"CVE-2026-112593","kind":"vulnerability","aliases":["CVE-2026-112593"],"related":[],"title":"Apple macOS: out-of-bounds write lets an app corrupt kernel memory","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory.","summary":"An out-of-bounds write flaw in macOS lets a local app crash the system or write kernel memory. Apple fixed it with improved bounds checking in macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","endpoints","infrastructure","macos"],"not_affected_if":["already-patched"],"how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against `15.8.2` (Sequoia) or `26.7.2` (Tahoe)\n- unknown for other checks; the sources do not say","fix":"- Update macOS Sequoia to `15.8.2` or later\n- Update macOS Tahoe to `26.7.2` or later","status":"open","published_at":"2026-10-26T21:17:51+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:36+00:00","updated_at":"2026-10-26T21:27:36+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:27:36Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS Sequoia to `15.8.2` or later\n- Update macOS Tahoe to `26.7.2` or later","reach":"local","title":"Apple macOS: out-of-bounds write lets an app corrupt kernel memory","impact":"high","summary":"An out-of-bounds write flaw in macOS lets a local app crash the system or write kernel memory. Apple fixed it with improved bounds checking in macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"local app writes kernel memory, possibly gaining system control","analyst_note":"Check Apple's security release notes for CVE-2026-112593 to confirm CVSS, whether the flaw is exploited, and the exact trigger conditions.","how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against `15.8.2` (Sequoia) or `26.7.2` (Tahoe)\n- unknown for other checks; the sources do not say","needs_analyst":true,"not_affected_if":["already-patched"],"who_is_affected":"Any Mac running macOS Sequoia before 15.8.2 or macOS Tahoe before 26.7.2 is in scope, since the flaw sits in the operating system and an app can trigger it. The sources do not name a specific configuration or feature that must be enabled. Systems already on the fixed versions can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000616,"input_tokens":3280,"output_tokens":577,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112593':16A,19A '-2026':15A,18A '15.8.2':56B,81C '26.7.2':60B,84C 'abl':89C 'address':69C 'app':10A,38B,86C 'appl':1A,21B,46B 'apple-devic':20B 'bound':6A,30B,51B,65C,72C 'caus':91C 'check':52B,73C 'corrupt':11A 'crash':39B 'cve':14A,17A 'devic':22B 'endpoint':23B 'fix':47B,77C 'flaw':32B 'improv':50B,71C 'infrastructur':24B 'issu':67C,75C 'kernel':12A,44B,97C 'let':8A,35B 'local':37B 'maco':2A,25B,34B,54B,58B,79C,82C 'may':87C 'memori':13A,45B,98C 'out-of-bound':3A,27B,62C 'sequoia':55B,80C 'system':41B,93C 'taho':59B,83C 'termin':94C 'unexpect':92C 'write':7A,31B,43B,66C,96C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running macOS Sequoia before 15.8.2 or macOS Tahoe before 26.7.2 is in scope, since the flaw sits in the operating system and an app can trigger it. The sources do not name a specific configuration or feature that must be enabled. Systems already on the fixed versions can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:51+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112593","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112593","severity":null,"published_at":"2026-10-26T21:17:51+00:00","modified_at":"2026-10-26T21:17:51+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}