{"id":"CVE-2026-112704","kind":"vulnerability","aliases":["CVE-2026-112704"],"related":[],"title":"Apple macOS: information leak lets a malicious app escape its sandbox","description":"An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.","summary":"Apple fixed an information leakage flaw in several macOS releases with extra validation. A malicious app can use it to break out of its sandbox.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["unknown"],"how_to_check":"- unknown","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), or later.","status":"open","published_at":"2026-10-26T21:18:05+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","triaged_at":"2026-10-26T21:23:15+00:00","updated_at":"2026-10-26T21:23:15+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:23:15Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), or later.","reach":"local","title":"Apple macOS: information leak lets a malicious app escape its sandbox","impact":"medium","summary":"Apple fixed an information leakage flaw in several macOS releases with extra validation. A malicious app can use it to break out of its sandbox.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"malicious app escapes sandbox and reaches protected system data","analyst_note":"Check Apple's security notes for the CVE-2026-112704 entry to confirm the affected builds, the data exposed and whether user interaction is needed.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Any Mac running an affected macOS release can be exposed to a local app that tries to escape its sandbox. The sources do not say which apps or configurations are needed to trigger it, so it is unknown whether managed or fleet Macs are affected in a different way. Teams that run macOS fleets should apply the patched releases.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000564,"input_tokens":3271,"output_tokens":473,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112704':14A,17A '-2026':13A,16A '15.8.2':67C '26.7.2':70C '27.2':64C 'abl':76C 'addit':54C 'address':52C 'app':8A,38B,73C 'appl':1A,19B,23B 'apple-devic':18B 'break':43B,78C 'cve':12A,15A 'devic':20B 'escap':9A 'extra':34B 'fix':24B,59C 'flaw':28B 'gate':63C 'golden':62C 'inform':3A,26B,49C 'infrastructur':21B 'issu':57C 'leak':4A 'leakag':27B,50C 'let':5A 'maco':2A,22B,31B,61C,65C,68C 'malici':7A,37B,72C 'may':74C 'releas':32B 'sandbox':11A,47B,82C 'sequoia':66C 'sever':30B 'taho':69C 'use':40B 'valid':35B,55C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running an affected macOS release can be exposed to a local app that tries to escape its sandbox. The sources do not say which apps or configurations are needed to trigger it, so it is unknown whether managed or fleet Macs are affected in a different way. Teams that run macOS fleets should apply the patched releases.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:05+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112704","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112704","severity":null,"published_at":"2026-10-26T21:18:05+00:00","modified_at":"2026-10-26T21:18:05+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","fetched_at":"2026-10-26T21:20:30+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}