p PatchFirst

CVE-2026-112556

CVE-2026-112556

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context.

CVSS 4.8 · Medium · EPSS 0.4% · Fix available

Published
Updated

Affected products and versions

  • macos

    Versions
    • ≥ 0, < 15.8.2: Affected (custom)
    • ≥ 0, < 26.7.2: Affected (custom)
    • ≥ 0, < 27.2: Affected (custom)

    Update to 15.8.2

Original sources

Check your server →