CVE-2026-112441

Low

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

SeverityLow

CVSS3.3

Exploit probability—

Product

macOS

PublishedOct 26, 2026

First seenOct 26, 2026

Weakness typeCWE-200Sensitive information exposure

How to fix

Update

Apple macOS15.8.2, 26.7.2, 27.2 or later
apple macos15.8.2, 26.7.2, 27.2 or later

Vendor advisories

support.apple.com/en-us/149521
support.apple.com/en-us/149522
support.apple.com/en-us/149523

Affected products

Product	Affected versions	Fixed in
Apple macOS	v < 15.8.2, v < 26.7.2, v < 27.2	15.8.2, 26.7.2, 27.2
apple macos	15.0 ≤ v < 15.8.2, 26.0 ≤ v < 26.7.2, 27.0 ≤ v < 27.2	15.8.2, 26.7.2, 27.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.