CVEsAppleCVE-2026-112558Published Oct 26, 20:41 · Updated Oct 26, 20:41 UTC
–
Not scored
CVE-2026-112558

A permissions issue was addressed with additional sandbox restrictions.

macOS
AffectedmacOS
FixUpdate to 15.8.2, 26.7.2, 27.2 or newer
PublishedOct 26, 20:41 · apple
ScoredNot yet
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:09 UTC

What we know

No known exploitation. CISA KEV, checked 22:09 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
No severity score yet.

Description

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

From apple

Affected and fixed versions

ProductAffectedFixed inmacOSbefore 15.8.215.8.2macOSbefore 26.7.226.7.2macOSbefore 27.227.2

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

support.apple.com/en-us/149521 · support.apple.comsupport.apple.com/en-us/149522 · support.apple.comsupport.apple.com/en-us/149523 · support.apple.com

Other CVEs in macOS

All 1,938 →
–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-113945Oct 268.4A logic issue was addressed with improved checks. · CVE-2026-65327Oct 26–An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-112529Oct 26