Medium · 4.8 CVE-2026-112556 EUVD-2026-110297GHSA-999g-cr6q-p755

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe…

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 15.8.2, < 26.7.2, < 27.2	15.8.2

Advisories 2

WID-SEC-2026-4165 Apple iOS, iPadOS, macOS und Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
NCSC-2026-0455 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · Oct 28, 2026

References

https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522
https://support.apple.com/en-us/149523