An out-of-bounds read was addressed with improved bounds checking.

macOS

AffectedmacOS

FixUpdate to 27.2 or newer

PublishedOct 26, 20:44 · apple

ScoredNot yet

Exploit code publicNone known · checked 21:18 UTC

ExploitedNone known · CISA KEV checked 22:11 UTC

What we know

No known exploitation. CISA KEV, checked 22:11 UTC.

No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.

No severity score yet.

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.

From apple

Affected and fixed versions

ProductAffectedFixed inmacOSbefore 27.227.2

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

support.apple.com/en-us/149521 · support.apple.com

Other CVEs in macOS

All 1,938 →

8.4A logic issue was addressed with improved checks. · CVE-2026-65327Oct 26 –An out-of-bounds read was addressed with improved bounds checking. · CVE-2026-112529Oct 26 –A path handling issue was addressed with improved validation. · CVE-2026-112483Oct 26