CVE-2026-112481
Received Received - Intake

Out-of-Bounds Read in macOS Golden Gate, Sequoia, and Tahoe

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: Apple Inc.

Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected process termination or disclose process memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-27
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-112481
EUVD
EUVD-2026-110221

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
Apple macOS 0
Apple macOS 0
Apple macOS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an out-of-bounds read vulnerability caused by insufficient bounds checking. It allows an attacker on the local network to read memory outside the intended range, potentially causing unexpected process termination or exposing sensitive process memory.

Impact Analysis

An attacker could exploit this to crash applications or access sensitive data in memory, such as credentials or personal information. This may lead to data leaks or service disruptions on affected systems.

Mitigation Strategies

Update to the latest versions of macOS Golden Gate 27.2, macOS Sequoia 15.8.2, or macOS Tahoe 26.7.2 to address the out-of-bounds read vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112481. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart