CVE-2026-112497

This issue was addressed with improved permissions checking

Risk score: 57/100
CVSS: 9.0 v3.1
Exploit chance (30 days): 0.2%
Published: 26 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 9.0 critical

References

https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522
https://support.apple.com/en-us/149523

Original description

This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.

Last activity 26 Oct 2026. Patch Forecast updates every hour.