CVE-2026-113946

Published Oct 26, 2026

Last updated 12 hours ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-113946 is an out-of-bounds write vulnerability that affects the CoreStorage component in Apple's macOS. Discovered by security researchers Nathaniel Oh, Jakob Pammer, and Peter Malone, the flaw can be exploited by a local application to cause unexpected system termination or corrupt kernel memory. Apple resolved the issue by implementing improved bounds checking to prevent the out-of-bounds write. The fix was officially released on October 26, 2026, and is available in macOS Golden Gate version 27.2.

Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Source
product-security@apple.com
NVD status
Received

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

11

References

Sources include official advisories and independent security research.