by Kastro
Paper/Archive/CVE-2026-112478

CVE-2026-112478

Apple macOS — An out-of-bounds read issue was addressed by removing the vulnerable code.

EPSS 0.2%CVSS 9.0
critical.is priorityof 100
29
CVSS 9.0 (ADP)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 9.9.099 × 202.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.

Affected

ProductAffectedFixed inSource
macOS< 26.7.226.7.2CNA
macOS< 27.227.2CNA

Scores by source

CISA ADP9.0CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.apple.com/en-us/149521refsupport.apple.com/en-us/149522