Live › vulnerability › CVE-2026-112696
Go to dashboardAn out-of-bounds write in Apple's operating systems lets a local app crash the system or corrupt kernel memory. Apple fixed it with improved bounds checking in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2 and visionOS 27.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Apple device running an affected OS version is in scope, since the flaw sits in the operating system kernel path rather than a specific app. The sources do not say which system component is involved or whether any particular configuration is required, so the exposed population beyond unpatched versions is unknown. Devices already on the fixed versions are not affected.
No product ranges from the sources yet.
sw_vers on macOS.27.2 (iOS, iPadOS, visionOS, macOS Golden Gate), 15.8.2 (macOS Sequoia) or 26.7.2 (macOS Tahoe).27.2 or later.27.2, macOS Sequoia to 15.8.2, macOS Tahoe to 26.7.2 or later.27.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-112696")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.