{"id":"CVE-2026-112601","kind":"vulnerability","aliases":["CVE-2026-112601"],"related":[],"title":"macOS Sequoia: integer overflow lets an app cause a denial-of-service","description":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.8.2. An app may be able to cause a denial-of-service.","summary":"An integer overflow in macOS Sequoia input handling can be triggered by an app, causing a denial-of-service. Apple fixed it in macOS Sequoia 15.8.2 with improved input validation.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoints","infrastructure","macos","macos-sequoia"],"not_affected_if":["macos-sequoia-15.8.2-or-later"],"how_to_check":"- Run `sw_vers -productVersion` on the Mac and compare against `15.8.2`\n- Check System Settings > General > Software Update for pending macOS updates","fix":"- Update macOS Sequoia to `15.8.2` or later","status":"open","published_at":"2026-10-26T21:17:52+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:32+00:00","updated_at":"2026-10-26T21:27:32+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:27:32Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS Sequoia to `15.8.2` or later","reach":"local","title":"macOS Sequoia: integer overflow lets an app cause a denial-of-service","impact":"low","summary":"An integer overflow in macOS Sequoia input handling can be triggered by an app, causing a denial-of-service. Apple fixed it in macOS Sequoia 15.8.2 with improved input validation.","category":"infrastructure","nicknames":[],"who_cares":["macos","macos-sequoia","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app crashes or hangs the system, denying service","analyst_note":"Sources give no CVSS score or exploit details; check Apple's security notes for the macOS 15.8.2 entry to confirm the component and attack path.","how_to_check":"- Run `sw_vers -productVersion` on the Mac and compare against `15.8.2`\n- Check System Settings > General > Software Update for pending macOS updates","needs_analyst":true,"not_affected_if":["macos-sequoia-15.8.2-or-later"],"who_is_affected":"Macs running macOS Sequoia before 15.8.2. The sources say an app can trigger it, so any Mac where untrusted or third-party apps run is in scope. The sources do not describe a configuration that narrows exposure further.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000577,"input_tokens":3244,"output_tokens":506,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112601':16A,19A '-2026':15A,18A '15.8.2':52B,73C 'abl':78C 'address':61C 'app':7A,39B,75C 'appl':46B 'caus':8A,40B,80C 'cve':14A,17A 'denial':11A,43B,83C 'denial-of-servic':10A,42B,82C 'endpoint':20B 'fix':47B,69C 'handl':33B 'improv':54B,63C 'infrastructur':21B 'input':32B,55B,64C 'integ':3A,27B,58C 'issu':67C 'let':5A 'maco':1A,22B,24B,30B,50B,71C 'macos-sequoia':23B 'may':76C 'overflow':4A,28B,59C 'sequoia':2A,25B,31B,51B,72C 'servic':13A,45B,85C 'trigger':36B 'valid':56B,65C","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS Sequoia before 15.8.2. The sources say an app can trigger it, so any Mac where untrusted or third-party apps run is in scope. The sources do not describe a configuration that narrows exposure further.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:52+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112601","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112601","severity":null,"published_at":"2026-10-26T21:17:52+00:00","modified_at":"2026-10-26T21:17:52+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}