CVE-2026-112438
A logic issue was addressed with improved state management
- Risk score
- 53/100
- CVSS
- 8.8 v3.1
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
In the news
TL;DR
Apple patches 304 vulnerabilities, including CVE-2026-112438, a logic issue addressed with improved state management.
- CVE-2026-112438 is a logic issue addressed with improved state management.
- This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.
- An unprivileged attacker may be able to execute arbitrary code as root.
- SecurityWeek reports that CVE-2026-112438 is a high-severity vulnerability with a CVSS score of 8.8.
AI summary of 1 article.
Why it is Yellow
- CVSS 8.8 high
References
Original description
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root.
Last activity 26 Oct 2026. Patch Forecast updates every hour.