3.3 Low

CVE-2026-112441 This issue was addressed by removing the vulnerable code

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

CVSS 3.1 detail

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitable with local access to the machine, without an account and if a user takes an action; the impact on data or service is limited.

Attack vector: Local
Attack complexity: Low
Privileges required: None
Interaction: Required
Scope: Unchanged
Confidentiality: Low
Integrity: None
Availability: None

Affected products and versions

Product	Affected versions	Fixed in
macOS 27.2	earliest → < 27.2	27.2
macOS 26.7	earliest → < 26.7.2	26.7.2
macOS 15.8	earliest → < 15.8.2	15.8.2

References

support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com

Timeline

Published October 26, 2026
Last modified November 4, 2026

The 3813 CVEs of macOS →

CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-113945 An out-of-bounds read was addressed with improved bounds checking 5.5 Medium CVE-2026-65327 A logic issue was addressed with improved checks 8.4 High

Track this CVE