{"id":"CVE-2026-113941","kind":"vulnerability","aliases":["CVE-2026-113941"],"related":[],"title":"Apple macOS: out-of-bounds read lets an app crash the system or read kernel memory","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or read kernel memory.","summary":"An out-of-bounds read in macOS allows an app to cause an unexpected system termination or read kernel memory. Apple fixed it with improved bounds checking in macOS Golden Gate 27.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","infrastructure","macos"],"not_affected_if":["patched-macos"],"how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against `27.2`\n- unknown","fix":"- Update macOS to `27.2` or later (Golden Gate)\n- unknown","status":"open","published_at":"2026-10-26T21:18:10+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","triaged_at":"2026-10-26T21:21:44+00:00","updated_at":"2026-10-26T21:21:44+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:21:44Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` or later (Golden Gate)\n- unknown","reach":"local","title":"Apple macOS: out-of-bounds read lets an app crash the system or read kernel memory","impact":"medium","summary":"An out-of-bounds read in macOS allows an app to cause an unexpected system termination or read kernel memory. Apple fixed it with improved bounds checking in macOS Golden Gate 27.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Kernel memory readable by a local app; system crashes unexpectedly","analyst_note":"Confirm affected macOS version range and whether Apple's security notes list a CVSS score or exploitation status; NVD entry has no severity.","how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against `27.2`\n- unknown","needs_analyst":true,"not_affected_if":["patched-macos"],"who_is_affected":"Macs running macOS releases earlier than Golden Gate 27.2 are affected, and any local app can trigger the flaw. The sources do not say whether specific configurations or features are required. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000562,"input_tokens":3260,"output_tokens":472,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113941':20A,23A '-2026':19A,22A '27.2':60B,81C 'abl':86C 'address':68C 'allow':36B 'app':10A,38B,83C 'appl':1A,24B,49B 'bound':6A,32B,54B,65C,71C 'caus':40B,88C 'check':55B,72C 'crash':11A 'cve':18A,21A 'endpoint':25B 'fix':50B,76C 'gate':59B,80C 'golden':58B,79C 'improv':53B,70C 'infrastructur':26B 'issu':74C 'kernel':16A,47B,94C 'let':8A 'maco':2A,27B,35B,57B,78C 'may':84C 'memori':17A,48B,95C 'out-of-bound':3A,29B,62C 'read':7A,15A,33B,46B,66C,93C 'system':13A,43B,90C 'termin':44B,91C 'unexpect':42B,89C","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS releases earlier than Golden Gate 27.2 are affected, and any local app can trigger the flaw. The sources do not say whether specific configurations or features are required. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:10+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113941","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113941","severity":null,"published_at":"2026-10-26T21:18:10+00:00","modified_at":"2026-10-26T21:18:10+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","fetched_at":"2026-10-26T21:20:31+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}