Medium · 6.5 CVE-2026-112511 EUVD-2026-110234GHSA-8rm3-p2f8-564x

A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 2…

Published Oct 26, 2026 · Updated Nov 3, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 15.8.2, < 26.7.2, < 27.2	15.8.2

Advisories 2

WID-SEC-2026-4165 Apple iOS, iPadOS, macOS und Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
NCSC-2026-0455 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · Oct 28, 2026

References

https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522
https://support.apple.com/en-us/149523