Vulnerability · Apple Macos

CVE-2026-112438

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root.

CVSS score (v3.1)8.8High
Fixed in 15.8.2
Not on CISA KEV list

Am I affected?

Sign in and add the software you use to your watchlist: we check it against every new vulnerability.

Timeline

  1. Published by NVD
  2. Last updated by NVD
  3. First covered by RedTeamDaily

Affected products

ProductVersions
Apple Macosfrom 15.0 to before 15.8.2; from 26.0 to before 26.7.2; from 27.0 to before 27.2

Coverage

Sources: NVD and CISA known exploited vulnerabilities catalogue.