–
Not scored
CVE-2026-112430
An authentication issue was addressed with improved validation of user attributes.
macOSAffectedmacOS
FixUpdate to 15.8.2, 26.7.2, 27.2 or newer
PublishedOct 26, 20:38 · apple
ScoredNot yet
Exploit code publicNone known · checked 00:19 UTC
ExploitedNone known · CISA KEV checked 01:03 UTC
What we know
No known exploitation. CISA KEV, checked 01:03 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 00:19 UTC.
No severity score yet.
Description
An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
From apple
Affected and fixed versions
ProductAffectedFixed inmacOSbefore 15.8.215.8.2macOSbefore 26.7.226.7.2macOSbefore 27.227.2
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known