CVEsAppleCVE-2026-112529Published Oct 26, 20:44 · Updated Oct 26, 20:44 UTC
–
Not scored
CVE-2026-112529

An out-of-bounds read was addressed with improved bounds checking.

macOS
AffectedmacOS
FixUpdate to 15.8.2, 26.7.2, 27.2 or newer
PublishedOct 26, 20:44 · apple
ScoredNot yet
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:04 UTC

What we know

No known exploitation. CISA KEV, checked 22:04 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
No severity score yet.

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.

From apple

Affected and fixed versions

ProductAffectedFixed inmacOSbefore 15.8.215.8.2macOSbefore 26.7.226.7.2macOSbefore 27.227.2

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

support.apple.com/en-us/149521 · support.apple.comsupport.apple.com/en-us/149522 · support.apple.comsupport.apple.com/en-us/149523 · support.apple.com

Other CVEs in macOS

All 1,938 →
–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-113945Oct 268.4A logic issue was addressed with improved checks. · CVE-2026-65327Oct 26–A path handling issue was addressed with improved validation. · CVE-2026-112483Oct 26