Apple macOS race condition before 27.2, 15.8.2, 26.7.2
CVE-2026-112708 Published on October 26, 2026
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.
Vulnerability Analysis
CVE-2026-112708 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and a high impact on availability.
Weakness Type
What is a Race Condition Vulnerability?
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.
CVE-2026-112708 has been classified to as a Race Condition vulnerability or weakness.
Products Associated with CVE-2026-112708
Want to know whenever a new CVE is published for Apple macOS? stack.watch will email you.
Affected Versions
Apple macOS:- Before 15.8.2 is affected.
- Before 26.7.2 is affected.
- Before 27.2 is affected.