Apple October 2026 updates patch 304 flaws, including prior exploit
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
76
Vulnerability1 · 1 read
CVE-2026-112428
Gatekeeper bypass by an app on macOS
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A logic flaw in macOS lets an application bypass Gatekeeper checks. Apple fixed it with stronger checks. Triggering requires a local app on the Mac; Apple does not say whether the user must open it. A successful bypass can let untrusted software run without Gatekeeper’s usual checks. macOS Golden Gate, Sequoia, and Tahoe are affected until the listed updates.
What to do: Install macOS Golden Gate 27.2, Sequoia 15.8.2, or Tahoe 26.7.2. Apple has not named a workaround.
| Product | Affected | Fixed in |
|---|---|---|
| Apple macOS Golden Gate | — | 27.2 |
| Apple macOS Sequoia | — | 15.8.2 |
| Apple macOS Tahoe | — | 26.7.2 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper checks.