Vulnerability · Apple Macos
CVE-2026-112438
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root.
CVSS score (v3.1)8.8High
Fixed in 15.8.2
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Timeline
- Published by NVD
- Last updated by NVD
- First covered by RedTeamDaily
Affected products
| Product | Versions |
|---|---|
| Apple Macos | from 15.0 to before 15.8.2; from 26.0 to before 26.7.2; from 27.0 to before 27.2 |
Coverage
Sources: NVD and CISA known exploited vulnerabilities catalogue.