{"id":"CVE-2026-113946","kind":"vulnerability","aliases":["CVE-2026-113946"],"related":[],"title":"Apple macOS: out-of-bounds write lets an app corrupt kernel memory","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.","summary":"An out-of-bounds write in macOS lets a local app crash the system or corrupt kernel memory. Apple fixed it with better bounds checking in macOS Golden Gate 27.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","infrastructure","macos"],"not_affected_if":["already-on-macos-27.2"],"how_to_check":"- Run `sw_vers -productVersion` on the Mac and compare with the fixed release, `27.2`\n- Check Software Update in System Settings for pending macOS updates","fix":"- Update macOS to `27.2` or later","status":"open","published_at":"2026-10-26T21:18:10+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","triaged_at":"2026-10-26T21:21:37+00:00","updated_at":"2026-10-26T21:21:37+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:21:37Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` or later","reach":"local","title":"Apple macOS: out-of-bounds write lets an app corrupt kernel memory","impact":"high","summary":"An out-of-bounds write in macOS lets a local app crash the system or corrupt kernel memory. Apple fixed it with better bounds checking in macOS Golden Gate 27.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"local app corrupts kernel memory or crashes the system","analyst_note":"Check Apple's security notes for CVE-2026-113946 to confirm affected versions and whether exploitation requires a local app or other conditions.","how_to_check":"- Run `sw_vers -productVersion` on the Mac and compare with the fixed release, `27.2`\n- Check Software Update in System Settings for pending macOS updates","needs_analyst":true,"not_affected_if":["already-on-macos-27.2"],"who_is_affected":"Mac machines running macOS releases earlier than Golden Gate 27.2 are affected, since the flaw is in the operating system kernel path. The sources do not say which earlier builds are vulnerable or whether the flaw needs any particular app or setting, so the exact exposure is unknown. Machines already on 27.2 or later can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000586,"input_tokens":3267,"output_tokens":519,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113946':16A,19A '-2026':15A,18A '27.2':54B,76C 'abl':81C 'address':63C 'app':10A,35B,78C 'appl':1A,20B,43B 'better':47B 'bound':6A,28B,48B,59C,66C 'caus':83C 'check':49B,67C 'corrupt':11A,40B,88C 'crash':36B 'cve':14A,17A 'endpoint':21B 'fix':44B,71C 'gate':53B,75C 'golden':52B,74C 'improv':65C 'infrastructur':22B 'issu':61C,69C 'kernel':12A,41B,89C 'let':8A,32B 'local':34B 'maco':2A,23B,31B,51B,73C 'may':79C 'memori':13A,42B,90C 'out-of-bound':3A,25B,56C 'system':38B,85C 'termin':86C 'unexpect':84C 'write':7A,29B,60C","nicknames":[],"mitigations":[],"who_affected":"Mac machines running macOS releases earlier than Golden Gate 27.2 are affected, since the flaw is in the operating system kernel path. The sources do not say which earlier builds are vulnerable or whether the flaw needs any particular app or setting, so the exact exposure is unknown. Machines already on 27.2 or later can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:10+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113946","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113946","severity":null,"published_at":"2026-10-26T21:18:10+00:00","modified_at":"2026-10-26T21:18:10+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","fetched_at":"2026-10-26T21:20:31+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}