AI description
**CVE-2026-112457** is a double free vulnerability affecting the Remote Management component in Apple's macOS. Discovered by security researchers Efstratios Kaplanellis of Almamater Technologies and Nathaniel Oh, the flaw can be exploited by an attacker on a local network to cause unexpected system termination or corrupt process memory. Apple addressed the issue by implementing improved memory management in its software updates. The fix is included in macOS Golden Gate 27.2, macOS Tahoe 26.7.2, and macOS Sequoia 15.8.2. Users are advised to update their operating systems to these versions or later to protect their systems from potential exploitation.
- Description
- A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
- Source
- product-security@apple.com
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 7.1
- Impact score
- 4.2
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-415
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
10