CVE-2026-112497 — Vulnerability intelligence

Apple — macOS

Published: 2026-10-26T20:35:21.949Z

CVSS

9

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.

Sources

• CVE-2026-112497
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-112497