CVEsAppleCVE-2026-112526Published Oct 26, 20:34 · Updated Oct 26, 20:34 UTC
–
Not scored
CVE-2026-112526

A buffer overflow was addressed with improved bounds checking.

macOS
AffectedmacOS
FixUpdate to 15.8.2, 26.7.2, 27.2 or newer
PublishedOct 26, 20:34 · apple
ScoredNot yet
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC

What we know

No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
No severity score yet.

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination.

From apple

Affected and fixed versions

ProductAffectedFixed inmacOSbefore 15.8.215.8.2macOSbefore 26.7.226.7.2macOSbefore 27.227.2

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

support.apple.com/en-us/149521 · support.apple.comsupport.apple.com/en-us/149522 · support.apple.comsupport.apple.com/en-us/149523 · support.apple.com

Other CVEs in macOS

All 1,938 →
–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-113945Oct 268.4A logic issue was addressed with improved checks. · CVE-2026-65327Oct 26–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-112529Oct 26