CVE-2026-112451
An out-of-bounds read was addressed with improved bounds checking
- Risk score
- 59/100
- CVSS
- 8.2 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service or disclose process memory.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
In the news
TL;DR
Apple patches 304 vulnerabilities, including CVE-2026-112451, an out-of-bounds read fixed with improved bounds checking.
- CVE-2026-112451 is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.
- A remote attacker may cause a denial-of-service or disclose process memory.
- SecurityWeek reports that CVE-2026-112451 is a high-severity vulnerability with a CVSS score of 8.2.
- SANS Internet Storm Center mentions CVE-2026-112451 in a list of 304 patched vulnerabilities.
AI summary of 1 article.
Why it is Yellow
- CVSS 8.2 high
- Remotely exploitable without logging in
References
Original description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service or disclose process memory.
Last activity 26 Oct 2026. Patch Forecast updates every hour.