{"id":"CVE-2026-113899","kind":"vulnerability","aliases":["CVE-2026-113899"],"related":[],"title":"Apple macOS: improved checks fix lets an app crash the system","description":"The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.","summary":"A flaw in macOS lets an app cause an unexpected system termination. Apple's description says the issue was addressed with improved checks, and it names fixed builds of macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["fixed-macos-build"],"how_to_check":"- Run `sw_vers -productVersion` and compare with the fixed builds named in the advisory.\n- Check the Apple security releases page for the matching macOS build.","fix":"- Update macOS to Golden Gate `27.2`, Sequoia `15.8.2` or Tahoe `26.7.2`, or later.","status":"open","published_at":"2026-10-26T21:18:06+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","triaged_at":"2026-10-26T21:23:07+00:00","updated_at":"2026-10-26T21:23:07+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:23:07Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to Golden Gate `27.2`, Sequoia `15.8.2` or Tahoe `26.7.2`, or later.","reach":"local","title":"Apple macOS: improved checks fix lets an app crash the system","impact":"low","summary":"A flaw in macOS lets an app cause an unexpected system termination. Apple's description says the issue was addressed with improved checks, and it names fixed builds of macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app can crash the system, causing an unexpected restart.","analyst_note":"Check Apple's security release notes for CVE-2026-113899 to confirm the affected versions and the trigger.","how_to_check":"- Run `sw_vers -productVersion` and compare with the fixed builds named in the advisory.\n- Check the Apple security releases page for the matching macOS build.","needs_analyst":true,"not_affected_if":["fixed-macos-build"],"who_is_affected":"Any Mac running a macOS version older than the fixed builds named in the advisory. The sources do not say whether any particular configuration or app is needed to trigger it. Machines already on the fixed builds are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000584,"input_tokens":3265,"output_tokens":516,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113899':14A,17A '-2026':13A,16A '15.8.2':57B,79C '26.7.2':60B,82C '27.2':55B,76C 'abl':87C 'address':42B,64C 'app':8A,29B,84C 'appl':1A,19B,35B 'apple-devic':18B 'build':50B 'caus':30B,89C 'check':4A,45B,67C 'crash':9A 'cve':12A,15A 'descript':37B 'devic':20B 'fix':5A,49B,71C 'flaw':24B 'gate':54B,75C 'golden':53B,74C 'improv':3A,44B,66C 'infrastructur':21B 'issu':40B,62C,69C 'let':6A,27B 'maco':2A,22B,26B,52B,73C,77C,80C 'may':85C 'name':48B 'say':38B 'sequoia':56B,78C 'system':11A,33B,91C 'taho':59B,81C 'termin':34B,92C 'unexpect':32B,90C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running a macOS version older than the fixed builds named in the advisory. The sources do not say whether any particular configuration or app is needed to trigger it. Machines already on the fixed builds are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:06+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113899","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113899","severity":null,"published_at":"2026-10-26T21:18:06+00:00","modified_at":"2026-10-26T21:18:06+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","fetched_at":"2026-10-26T21:20:30+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}