Apple October 2026 updates patch 304 flaws, including prior exploit
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
76
Vulnerability1 · 1 read
CVE-2026-112429
Out-of-bounds read in macOS via crafted file
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
An out-of-bounds read in macOS can disclose process memory when a user processes a maliciously crafted file. Apple fixed it with improved bounds checking. Affected releases are those before the stated Golden Gate, Sequoia, and Tahoe updates; Apple has not listed affected builds.
What to do: Update to macOS Golden Gate 27.2, macOS Sequoia 15.8.2, or macOS Tahoe 26.7.2.
| Product | Affected | Fixed in |
|---|---|---|
| Apple macOS Golden Gate | — | 27.2 |
| Apple macOS Sequoia | — | 15.8.2 |
| Apple macOS Tahoe | — | 26.7.2 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may disclose process memory.