CVE-2026-112704 — Vulnerability intelligence

apple — macos

Published: 2026-10-26T21:18:05.173

CVSS

6.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.

Sources

• CVE-2026-112704
• Vendor Advisory
• Vendor Advisory
• Vendor Advisory