{"id":"CVE-2026-113934","kind":"vulnerability","aliases":["CVE-2026-113934"],"related":[],"title":"Apple macOS: memory handling flaw lets an app crash the system","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.","summary":"A memory handling flaw in macOS lets a local app cause the system to terminate unexpectedly or corrupt kernel memory. The sources do not say whether this is code execution or only a denial of service.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["already-on-27.2-or-later"],"how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed release named in the advisory\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate) or later\n- unknown","status":"open","published_at":"2026-10-26T21:18:09+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","triaged_at":"2026-10-26T21:21:50+00:00","updated_at":"2026-10-26T21:21:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:21:50Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate) or later\n- unknown","reach":"local","title":"Apple macOS: memory handling flaw lets an app crash the system","impact":"high","summary":"A memory handling flaw in macOS lets a local app cause the system to terminate unexpectedly or corrupt kernel memory. The sources do not say whether this is code execution or only a denial of service.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Kernel memory corruption; the system may crash or be taken over","analyst_note":"Check Apple's security notes for CVE-2026-113934 to confirm the attack prerequisites and whether code execution is possible.","how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed release named in the advisory\n- unknown","needs_analyst":true,"not_affected_if":["already-on-27.2-or-later"],"who_is_affected":"Machines running macOS Golden Gate before 27.2 are affected, since the sources name 27.2 as the fixed release. The sources do not say which configurations or app types are needed to trigger it, so machines already on 27.2 or later can skip it. Managed fleets should confirm their macOS build.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000571,"input_tokens":3249,"output_tokens":492,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113934':14A,17A '-2026':13A,16A '27.2':75C 'abl':80C 'address':62C 'app':8A,32B,77C 'appl':1A,19B 'apple-devic':18B 'caus':33B,82C 'code':51B 'corrupt':40B,87C 'crash':9A 'cve':12A,15A 'denial':56B 'devic':20B 'execut':52B 'fix':70C 'flaw':5A,26B 'gate':74C 'golden':73C 'handl':4A,25B,66C 'improv':64C 'infrastructur':21B 'issu':60C,68C 'kernel':41B,88C 'let':6A,29B 'local':31B 'maco':2A,22B,28B,72C 'may':78C 'memori':3A,24B,42B,65C,89C 'say':47B 'servic':58B 'sourc':44B 'system':11A,35B,84C 'termin':37B,85C 'unexpect':38B,83C 'whether':48B","nicknames":[],"mitigations":[],"who_affected":"Machines running macOS Golden Gate before 27.2 are affected, since the sources name 27.2 as the fixed release. The sources do not say which configurations or app types are needed to trigger it, so machines already on 27.2 or later can skip it. Managed fleets should confirm their macOS build.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:09+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113934","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113934","severity":null,"published_at":"2026-10-26T21:18:09+00:00","modified_at":"2026-10-26T21:18:09+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","fetched_at":"2026-10-26T21:20:31+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}