Live › vulnerability › CVE-2026-112675
Go to dashboardApple fixed a flaw in macOS where an app could access sensitive user data it should not reach. The sources say the fix adds additional entitlement checks in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
The sources say the flaw lets an app reach sensitive user data, but they do not say which apps or configurations are needed to trigger it. Any team running Macs on the affected macOS branches should update; the sources do not say whether managed or fleet-only Macs are treated differently.
No product ranges from the sources yet.
sw_vers -productVersion on each Mac and compare against the fixed builds (Tahoe 26.7.2, Sequoia 15.8.2, Golden Gate 27.2)26.7.2 (Tahoe), 15.8.2 (Sequoia) or 27.2 (Golden Gate) via System Settings > General > Software UpdateEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-112675")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.