{"id":"CVE-2026-112708","kind":"vulnerability","aliases":["CVE-2026-112708"],"related":[],"title":"Apple macOS: race condition lets an app crash the system or corrupt memory","description":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.","summary":"A race condition in macOS lets a local app trigger an unexpected system termination or corrupt process memory. Apple fixed it with improved locking in the listed macOS releases.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","macos","macos-fleet","other"],"not_affected_if":["already-on-fixed-macos"],"how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions below\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe)","status":"open","published_at":"2026-10-26T21:18:06+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","triaged_at":"2026-10-26T21:23:11+00:00","updated_at":"2026-10-26T21:23:11+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T21:23:11Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe)","reach":"local","title":"Apple macOS: race condition lets an app crash the system or corrupt memory","impact":"medium","summary":"A race condition in macOS lets a local app trigger an unexpected system termination or corrupt process memory. Apple fixed it with improved locking in the listed macOS releases.","category":"other","nicknames":[],"who_cares":["macos","apple","macos-fleet"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Local app crashes the system or corrupts process memory","analyst_note":"Sources give only the NVD record; check Apple's security notes for the affected builds and whether a public exploit exists.","how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions below\n- unknown","needs_analyst":true,"not_affected_if":["already-on-fixed-macos"],"who_is_affected":"Mac machines running macOS versions earlier than the fixed releases named in the advisory. The sources do not say which earlier builds are affected beyond that, so unknown. Managed fleets should confirm which Mac builds are in use.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000563,"input_tokens":3275,"output_tokens":470,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112708':16A,19A '-2026':15A,18A '15.8.2':73C '26.7.2':76C '27.2':70C 'abl':81C 'address':58C 'app':7A,33B,78C 'appl':1A,20B,43B 'caus':83C 'condit':4A,27B,56C 'corrupt':12A,40B,88C 'crash':8A 'cve':14A,17A 'fix':44B,65C 'fleet':24B 'gate':69C 'golden':68C 'improv':47B,60C 'issu':63C 'let':5A,30B 'list':51B 'local':32B 'lock':48B,61C 'maco':2A,21B,23B,29B,52B,67C,71C,74C 'macos-fleet':22B 'may':79C 'memori':13A,42B,90C 'process':41B,89C 'race':3A,26B,55C 'releas':53B 'sequoia':72C 'system':10A,37B,85C 'taho':75C 'termin':38B,86C 'trigger':34B 'unexpect':36B,84C","nicknames":[],"mitigations":[],"who_affected":"Mac machines running macOS versions earlier than the fixed releases named in the advisory. The sources do not say which earlier builds are affected beyond that, so unknown. Managed fleets should confirm which Mac builds are in use.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:06+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112708","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112708","severity":null,"published_at":"2026-10-26T21:18:06+00:00","modified_at":"2026-10-26T21:18:06+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","fetched_at":"2026-10-26T21:20:30+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}