CVE-2026-112524

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVSS v3 7.7 HIGH

7.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/149521	Vendor Advisory
https://support.apple.com/en-us/149522	Vendor Advisory
https://support.apple.com/en-us/149523	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

History

05 Nov 2026, 14:04

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/149521 -~~	() https://support.apple.com/en-us/149521 - Vendor Advisory
References	~~() https://support.apple.com/en-us/149522 -~~	() https://support.apple.com/en-us/149522 - Vendor Advisory
References	~~() https://support.apple.com/en-us/149523 -~~	() https://support.apple.com/en-us/149523 - Vendor Advisory
CPE		cpe:2.3:o:apple:macos::::::::
First Time		Apple Apple macos

04 Nov 2026, 17:17

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.7
CWE		CWE-416

26 Oct 2026, 21:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-26 21:17

Updated : 2026-11-05 14:04

NVD link : CVE-2026-112524

Mitre link : CVE-2026-112524

CVE.ORG link : CVE-2026-112524

JSON object : View

Products Affected

apple

macos

CWE

CWE-416

Use After Free

{"id": "CVE-2026-112524", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-112524", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-11-04T16:21:53.205201Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 2.5}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "macOS", "versions": [{"status": "affected", "version": "0", "lessThan": "15.8.2", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "26.7.2", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "27.2", "versionType": "custom"}]}]}], "published": "2026-10-26T21:17:44.643", "references": [{"url": "https://support.apple.com/en-us/149521", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/149522", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/149523", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory."}], "lastModified": "2026-11-05T14:04:42.307", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "855F5ECD-CA54-4DB4-8AD6-86383177270D", "versionEndExcluding": "15.8.2", "versionStartIncluding": "15.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C07128F2-DA38-4B58-B8F5-5F1DA299EE2C", "versionEndExcluding": "26.7.2", "versionStartIncluding": "26.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12846F95-3F15-4909-9FD2-591AA176A6F0", "versionEndExcluding": "27.2", "versionStartIncluding": "27.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}