A logic issue was addressed with improved checks.

macOS

AffectedmacOS

FixUpdate to 15.8.2, 26.7.2, 27.2 or newer

PublishedOct 26, 20:37 · apple

ScoredNot yet

Exploit code publicNone known · checked 21:18 UTC

ExploitedNone known · CISA KEV checked 22:04 UTC

What we know

No known exploitation. CISA KEV, checked 22:04 UTC.

No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.

No severity score yet.

Description

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper checks.

From apple

Affected and fixed versions

ProductAffectedFixed inmacOSbefore 15.8.215.8.2macOSbefore 26.7.226.7.2macOSbefore 27.227.2

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

support.apple.com/en-us/149521 · support.apple.com support.apple.com/en-us/149522 · support.apple.com support.apple.com/en-us/149523 · support.apple.com

Other CVEs in macOS

All 1,938 →

–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-113945Oct 26 8.4A logic issue was addressed with improved checks. · CVE-2026-65327Oct 26 –An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-112529Oct 26