CVEvulnerability

CVE-2026-112438

8.8 HIGH Published 2026-10-26 Modified 2026-10-29 Official page ↗

Status: Analyzed
Published: 2026-10-26
Last modified: 2026-10-29
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root.

Affected configurations

• apple macos (>= 15.0 < 15.8.2) • apple macos (>= 26.0 < 26.7.2) • apple macos (>= 27.0 < 27.2)

References

https://support.apple.com/en-us/149521 Release Notes, Vendor Advisory
https://support.apple.com/en-us/149522 Release Notes, Vendor Advisory
https://support.apple.com/en-us/149523 Release Notes, Vendor Advisory