CVE-2026-112410
Apple Macos: double free
- Risk score
- 55/100
- CVSS
- 7.5 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may cause an unexpected process termination.
- Affected
- Apple Macos
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Apple Macos: Red, act today. An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.
The flaws
- CVE-2026-112410: Double free (CVSS 7.5 · EPSS 0%)
- CVE-2026-65400: Apple macOS Improper Authentication Vulnerability (CVSS 9.8 · exploited)
- CVE-2026-86868: Authentication bypass (CVSS 9.1 · EPSS 0%)
- CVE-2026-84579: A logic issue was addressed with improved checks (CVSS 8.8 · EPSS 1%)
The fix
Fix: Apply the vendor's security update; see the linked advisory.
Who is exposed: Apple Macos
Where it stands
- Exploited in the wild
- On CISA's exploited list since 18 Aug
- US federal deadline 21 Aug
- 1 outlet covering it
How it unfolded
- 18 Aug, CISA (official): Added to the Known Exploited Vulnerabilities list
- 21 Aug, Deadline (official): US federal agencies must have patched
- 26 Oct, SANS Internet Storm Center (press): Apple Patches for October 2026, (Mon, Oct 26th)
Connects to
- Same weakness: Double free (CWE-415). 49 other warnings in 30 days
- Same product: Earlier Apple Macos warnings. 82 in the last 90 days
- Reported alongside: An access issue was addressed with improved access restrictions. CVE-2026-86990 · in 1 of the same article
In the news
TL;DR
Apple patches 304 vulnerabilities, including a high-severity double free issue in macOS.
- CVE-2026-112410 is a double free issue in macOS, fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.
- SecurityWeek reports that CVE-2026-112410 is a high-severity vulnerability with a CVSS score of 7.5.
- No exploitation in the wild is mentioned in the provided articles.
- Exploitation status: not mentioned.
AI summary of 1 article.
Why it is Yellow
- CVSS 7.5 high
- Remotely exploitable without logging in
References
Original description
A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may cause an unexpected process termination.
Last activity 26 Oct 2026. Patch Forecast updates every hour.