{"id":"CVE-2026-112647","kind":"vulnerability","aliases":["CVE-2026-112647"],"related":[],"title":"Apple macOS: sandbox access flaw lets an app read sensitive user data","description":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.","summary":"Apple fixed an access issue in macOS by adding sandbox restrictions. A malicious or compromised app may be able to read sensitive user data.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","macos","other"],"not_affected_if":[],"how_to_check":"- Check the macOS version with `sw_vers` and compare it to the fixed releases\n- unknown for any further check; the sources do not say","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe)\n- unknown for any other action; the sources do not say","status":"open","published_at":"2026-10-26T21:17:58+00:00","first_seen_at":"2026-10-26T21:20:29+00:00","triaged_at":"2026-10-26T21:23:57+00:00","updated_at":"2026-10-26T21:23:57+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T21:23:57Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe)\n- unknown for any other action; the sources do not say","reach":"local","title":"Apple macOS: sandbox access flaw lets an app read sensitive user data","impact":"medium","summary":"Apple fixed an access issue in macOS by adding sandbox restrictions. A malicious or compromised app may be able to read sensitive user data.","category":"other","nicknames":[],"who_cares":["macos","apple","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"app reads sensitive user data outside its sandbox","analyst_note":"Check Apple's security release notes for the CVE to confirm the affected versions, attack prerequisites and severity.","how_to_check":"- Check the macOS version with `sw_vers` and compare it to the fixed releases\n- unknown for any further check; the sources do not say","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Mac users and teams running macOS releases older than the listed fixed versions. The sources do not say which configurations or app types are needed to trigger it. unknown for who can safely skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000561,"input_tokens":3277,"output_tokens":466,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112647':15A,18A '-2026':14A,17A '15.8.2':66C '26.7.2':69C '27.2':63C 'abl':40B,74C 'access':4A,25B,47C,76C 'add':30B 'addit':52C 'address':50C 'app':8A,37B,71C 'appl':1A,19B,22B 'compromis':36B 'cve':13A,16A 'data':12A,45B,79C 'endpoint':20B 'fix':23B,58C 'flaw':5A 'gate':62C 'golden':61C 'issu':26B,48C,56C 'let':6A 'maco':2A,21B,28B,60C,64C,67C 'malici':34B 'may':38B,72C 'read':9A,42B 'restrict':32B,54C 'sandbox':3A,31B,53C 'sensit':10A,43B,77C 'sequoia':65C 'taho':68C 'user':11A,44B,78C","nicknames":[],"mitigations":[],"who_affected":"Mac users and teams running macOS releases older than the listed fixed versions. The sources do not say which configurations or app types are needed to trigger it. unknown for who can safely skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:58+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112647","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112647","severity":null,"published_at":"2026-10-26T21:17:58+00:00","modified_at":"2026-10-26T21:17:58+00:00","first_seen_at":"2026-10-26T21:20:29+00:00","fetched_at":"2026-10-26T21:20:29+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}