CVE-2026-112478

An out-of-bounds read issue was addressed by removing the vulnerable code

Risk score: 56/100
CVSS: 9.0 v3.1
Exploit chance (30 days): 0.2%
Published: 26 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 9.0 critical

References

https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522

Original description

An out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.

Last activity 26 Oct 2026. Patch Forecast updates every hour.