GCVE-1988-2026-0456
Vulnerability from gna-1988 – Published: 2026-11-02 07:29 – Updated: 2026-11-02 07:29
VLAI
EPSS
VEX
Title
APPLE-SA-10-26-2026-4 macOS Golden Gate 27.2
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-10-26-2026-4 macOS Golden Gate 27.2
macOS Golden Gate 27.2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149521.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accelerate Framework
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted image may lead to unexpected
app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-86971: an anonymous researcher
Accounts
Available for: macOS Golden Gate
Impact: A malicious application may be able to bypass Privacy
preferences
Description: A logging issue was addressed with improved data redaction.
CVE-2026-113898: Bhaswanth Chigurupati
Accounts
Available for: macOS Golden Gate
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement
checks.
CVE-2026-112446: LiangWei, Sindre Sorhus
AirPort
Available for: macOS Golden Gate
Impact: An app may be able to read sensitive location information
Description: An authorization issue was addressed with improved state
management.
CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus
APFS
Available for: macOS Golden Gate
Impact: Mounting a maliciously crafted disk image may cause unexpected
system termination or corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-84496: Maher Azzouzi, 준우 이, Jonathan Bar Or (@yo_yo_yo_jbo),
Bhuwan Bhetwal, Narendra Singh (@_3P1C), Jakob Pammer, Aswin Kumar
Gokula Kannan, Thanatos Tian (HKPolyU) & wgg with Diffract, Marco
Schmitt, Kwak kiyong (@Pwnkai23), Song nuri, Nathaniel Oh (@calysteon),
an anonymous researcher
APFS
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112536: Ruslan Dautov, Kwak Kiyong (@Pwnkai23), Song Nuri,
Thanatos Tian (HKPolyU) & wgg with Diffract, Narendra Singh (@_3P1C),
Thomas Guillem
APFS
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan
Dautov, Peter Malone
App Store
Available for: macOS Golden Gate
Impact: An app may be able to bypass network restrictions
Description: This issue was addressed with improved checks.
CVE-2026-112467: Sindre Sorhus
App Store
Available for: macOS Golden Gate
Impact: A remote attacker may be able to break out of the WebContent
sandbox
Description: This issue was addressed with improved input validation.
CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
Apple Neural Engine
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112696: Jaeyeong Lee
Apple Neural Engine
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-84494: Meta Red Team X - Nik Tsytsarkin
AppleAVD
Available for: macOS Golden Gate
Impact: A malicious app may be able to break out of its sandbox
Description: An information leakage was addressed with additional
validation.
CVE-2026-112704: Josh Maine of Calif.io
AppleAVD
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology,
Inc, Hcamael and 章鱼哥@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta
Red Team X - Nik Tsytsarkin
AppleAVD
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
corrupt process memory
Description: An out-of-bounds write was addressed with improved input
validation.
CVE-2026-112415: Hcamael and 章鱼哥@aipy (aipyaipy.com), Rahul Raj
AppleAVD
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination or corrupt process memory
Description: The issue was addressed with improved memory handling.
CVE-2026-112454: @Licht_jb, Hcamael and 章鱼哥@aipy (aipyaipy.com)
AppleMobileFileIntegrity
Available for: macOS Golden Gate
Impact: A malicious app may be able to read or write to protected files
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos
AppleRAID
Available for: macOS Golden Gate
Impact: Mounting a malicious disk image may cause unexpected system
termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112544: Peter Malone
AppleRAID
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)
Archive Utility
Available for: macOS Golden Gate
Impact: An attacker with root privileges may be able to access protected
user data
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps
Inc.
ArchiveService
Available for: macOS Golden Gate
Impact: An app may bypass Gatekeeper checks
Description: A logic issue was addressed with improved state management.
CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul
Montgomery (@nullevent)
ArchiveService
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted file may bypass Gatekeeper
checks
Description: A logic issue was addressed with improved checks.
CVE-2026-112568: an anonymous researcher
Audio
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx
(@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding),
Nathaniel Oh (@calysteon)
Audio
Available for: macOS Golden Gate
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with additional entitlement
checks.
CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud
AVEVideoEncoder
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io
AVEVideoEncoder
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-112689: Franco Belman at Blackwing Intelligence
AVEVideoEncoder
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com)
AVEVideoEncoder
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
read kernel memory
Description: An out-of-bounds read was addressed with improved input
validation.
CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com)
Bluetooth
Available for: macOS Golden Gate
Impact: An attacker in physical proximity may be able to cause a
denial-of-service
Description: A null pointer dereference was addressed with improved
validation.
CVE-2026-112566: Chris Bailey - Short Circuit
BOM
Available for: macOS Golden Gate
Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks
Description: The issue was addressed with improved checks.
CVE-2026-112672: 준우 이, Pasquale Scola
BOM
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted file may lead to heap
corruption
Description: An out-of-bounds write issue was addressed with improved
input validation.
CVE-2026-112670: Bhaswanth Chigurupati
Calendar
Available for: macOS Golden Gate
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)
Calendar
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted calendar invitation may lead to
memory corruption
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-112619: Ivan Fratric of Google Project Zero
Carbon Core
Available for: macOS Golden Gate
Impact: An app may bypass Gatekeeper checks
Description: A file quarantine bypass was addressed with additional
checks.
CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
CloudKit
Available for: macOS Golden Gate
Impact: A malicious app may be able to gain root privileges
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs
ColorSync
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted image may result in disclosure
of process memory
Description: The issue was addressed with improved checks.
CVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X
- - Nik Tsytsarkin
ColorSync
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted file may disclose process
memory
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-112429: Mateusz Jurczyk of Google Project Zero
Compression
Available for: macOS Golden Gate
Impact: An app may be able to disclose kernel memory
Description: A memory initialization issue was addressed with improved
memory handling.
CVE-2026-113910: Tucker Willenborg
configd
Available for: macOS Golden Gate
Impact: An app may be able to gain root privileges
Description: A parsing issue in the handling of directory paths was
addressed with improved path validation.
CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger
& Ro Achterberg of Nosebeard Labs
Control Center
Available for: macOS Golden Gate
Impact: A malicious application may be able to bypass Privacy
preferences
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat
Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,
Lakshay Sharma (MrW0r57)
Core Image
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted image may lead to unexpected
process termination
Description: A buffer overflow was addressed with improved bounds
checking.
CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin
CoreAudio
Available for: macOS Golden Gate
Impact: Processing a maliciously crafted media file may lead to
unexpected app termination or corrupt process memory
Description: An out-of-bounds access issue was addressed with improved
bounds checking.
CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman
Zabicki, Anna Groza (@pwnlambda) of Calif.io
CoreAudio
Available for: macOS Golden Gate
Impact: An app may be able to cause unexpected system termination or
corrupt process memory
Descr
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| unknown | macOS Golden Gate |
Affected:
unknown
|
guessed |
Relationships
reference
GCVE-1988-2026-0456 (this record)
- related CVE-2022-26704
- related CVE-2026-112410
- related CVE-2026-112413
- related CVE-2026-112414
- related CVE-2026-112415
- related CVE-2026-112416
- related CVE-2026-112421
- related CVE-2026-112423
- related CVE-2026-112424
- related CVE-2026-112425
- related CVE-2026-112427
- related CVE-2026-112428
- related CVE-2026-112429
- related CVE-2026-112430
- related CVE-2026-112432
- related CVE-2026-112434
- related CVE-2026-112437
- related CVE-2026-112438
- related CVE-2026-112441
- related CVE-2026-112442
- related CVE-2026-112443
- related CVE-2026-112444
- related CVE-2026-112446
- related CVE-2026-112447
- related CVE-2026-112449
- related CVE-2026-112451
- related CVE-2026-112453
- related CVE-2026-112454
- related CVE-2026-112455
- related CVE-2026-112456
- related CVE-2026-112457
- related CVE-2026-112459
- related CVE-2026-112461
- related CVE-2026-112462
- related CVE-2026-112464
- related CVE-2026-112466
- related CVE-2026-112467
- related CVE-2026-112468
- related CVE-2026-112469
- related CVE-2026-112470
- related CVE-2026-112471
- related CVE-2026-112473
- related CVE-2026-112474
- related CVE-2026-112475
- related CVE-2026-112476
- related CVE-2026-112477
- related CVE-2026-112478
- related CVE-2026-112479
- related CVE-2026-112480
- related CVE-2026-112481
- related CVE-2026-112482
- related CVE-2026-112483
- related CVE-2026-112484
- related CVE-2026-112485
- related CVE-2026-112486
- related CVE-2026-112487
- related CVE-2026-112488
- related CVE-2026-112491
- related CVE-2026-112492
- related CVE-2026-112493
- related CVE-2026-112494
- related CVE-2026-112495
- related CVE-2026-112497
- related CVE-2026-112498
- related CVE-2026-112500
- related CVE-2026-112501
- related CVE-2026-112502
- related CVE-2026-112504
- related CVE-2026-112505
- related CVE-2026-112506
- related CVE-2026-112508
- related CVE-2026-112510
- related CVE-2026-112511
- related CVE-2026-112512
- related CVE-2026-112513
- related CVE-2026-112514
- related CVE-2026-112515
- related CVE-2026-112516
- related CVE-2026-112517
- related CVE-2026-112518
- related CVE-2026-112519
- related CVE-2026-112521
- related CVE-2026-112522
- related CVE-2026-112523
- related CVE-2026-112524
- related CVE-2026-112525
- related CVE-2026-112526
- related CVE-2026-112529
- related CVE-2026-112530
- related CVE-2026-112531
- related CVE-2026-112532
- related CVE-2026-112533
- related CVE-2026-112534
- related CVE-2026-112535
- related CVE-2026-112536
- related CVE-2026-112537
- related CVE-2026-112539
- related CVE-2026-112540
- related CVE-2026-112541
- related CVE-2026-112542
- related CVE-2026-112543
- related CVE-2026-112544
- related CVE-2026-112545
- related CVE-2026-112546
- related CVE-2026-112548
- related CVE-2026-112550
- related CVE-2026-112551
- related CVE-2026-112552
- related CVE-2026-112553
- related CVE-2026-112554
- related CVE-2026-112555
- related CVE-2026-112556
- related CVE-2026-112557
- related CVE-2026-112558
- related CVE-2026-112559
- related CVE-2026-112561
- related CVE-2026-112562
- related CVE-2026-112563
- related CVE-2026-112565
- related CVE-2026-112566
- related CVE-2026-112567
- related CVE-2026-112568
- related CVE-2026-112569
- related CVE-2026-112570
- related CVE-2026-112571
- related CVE-2026-112575
- related CVE-2026-112576
- related CVE-2026-112577
- related CVE-2026-112595
- related CVE-2026-112596
- related CVE-2026-112599
- related CVE-2026-112604
- related CVE-2026-112606
- related CVE-2026-112607
- related CVE-2026-112614
- related CVE-2026-112615
- related CVE-2026-112616
- related CVE-2026-112617
- related CVE-2026-112619
- related CVE-2026-112620
- related CVE-2026-112621
- related CVE-2026-112622
- related CVE-2026-112623
- related CVE-2026-112624
- related CVE-2026-112625
- related CVE-2026-112626
- related CVE-2026-112627
- related CVE-2026-112628
- related CVE-2026-112629
- related CVE-2026-112630
- related CVE-2026-112632
- related CVE-2026-112633
- related CVE-2026-112634
- related CVE-2026-112637
- related CVE-2026-112638
- related CVE-2026-112639
- related CVE-2026-112640
- related CVE-2026-112642
- related CVE-2026-112647
- related CVE-2026-112651
- related CVE-2026-112652
- related CVE-2026-112653
- related CVE-2026-112654
- related CVE-2026-112655
- related CVE-2026-112656
- related CVE-2026-112658
- related CVE-2026-112659
- related CVE-2026-112660
- related CVE-2026-112665
- related CVE-2026-112666
- related CVE-2026-112668
- related CVE-2026-112669
- related CVE-2026-112670
- related CVE-2026-112671
- related CVE-2026-112672
- related CVE-2026-112673
- related CVE-2026-112675
- related CVE-2026-112676
- related CVE-2026-112677
- related CVE-2026-112678
- related CVE-2026-112679
- related CVE-2026-112680
- related CVE-2026-112682
- related CVE-2026-112683
- related CVE-2026-112684
- related CVE-2026-112685
- related CVE-2026-112686
- related CVE-2026-112688
- related CVE-2026-112689
- related CVE-2026-112690
- related CVE-2026-112693
- related CVE-2026-112695
- related CVE-2026-112696
- related CVE-2026-112697
- related CVE-2026-112698
- related CVE-2026-112699
- related CVE-2026-112704
- related CVE-2026-112705
- related CVE-2026-112708
- related CVE-2026-113896
- related CVE-2026-113897
- related CVE-2026-113898
- related CVE-2026-113899
- related CVE-2026-113900
- related CVE-2026-113901
- related CVE-2026-113903
- related CVE-2026-113904
- related CVE-2026-113907
- related CVE-2026-113909
- related CVE-2026-113910
- related CVE-2026-113912
- related CVE-2026-113913
- related CVE-2026-113915
- related CVE-2026-113934
- related CVE-2026-113935
- related CVE-2026-113936
- related CVE-2026-113937
- related CVE-2026-113938
- related CVE-2026-113939
- related CVE-2026-113940
- related CVE-2026-113941
- related CVE-2026-113942
- related CVE-2026-113943
- related CVE-2026-113944
- related CVE-2026-113945
- related CVE-2026-113946
- related CVE-2026-113947
- related CVE-2026-113948
- related CVE-2026-113949
- related CVE-2026-113950
- related CVE-2026-113952
- related CVE-2026-65327
- related CVE-2026-65350
- related CVE-2026-65384
- related CVE-2026-65397
- related CVE-2026-84494
- related CVE-2026-84495
- related CVE-2026-84496
- related CVE-2026-84590
- related CVE-2026-86896
- related CVE-2026-86925
- related CVE-2026-86936
- related CVE-2026-86937
- related CVE-2026-86939
- related CVE-2026-86941
- related CVE-2026-86943
- related CVE-2026-86945
- related CVE-2026-86946
- related CVE-2026-86968
- related CVE-2026-86969
- related CVE-2026-86970
- related CVE-2026-86971
- related CVE-2026-86972
- related CVE-2026-86973
- related CVE-2026-86974
- related CVE-2026-86978
- related CVE-2026-86984
- related CVE-2026-86985
- related CVE-2026-86986
- related CVE-2026-86988
- related CVE-2026-86990
- related CVE-2026-86991
- related CVE-2026-86992
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS Golden Gate",
"vendor": "unknown",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-4 macOS Golden Gate 27.2\n\nmacOS Golden Gate 27.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149521.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate Framework\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86971: an anonymous researcher\n\nAccounts\nAvailable for: macOS Golden Gate\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nAccounts\nAvailable for: macOS Golden Gate\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112446: LiangWei, Sindre Sorhus\n\nAirPort\nAvailable for: macOS Golden Gate\nImpact: An app may be able to read sensitive location information\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus\n\nAPFS\nAvailable for: macOS Golden Gate\nImpact: Mounting a maliciously crafted disk image may cause unexpected\nsystem termination or corrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84496: Maher Azzouzi, \uc900\uc6b0 \uc774, Jonathan Bar Or (@yo_yo_yo_jbo),\nBhuwan Bhetwal, Narendra Singh (@_3P1C), Jakob Pammer, Aswin Kumar\nGokula Kannan, Thanatos Tian (HKPolyU) \u0026 wgg with Diffract, Marco\nSchmitt, Kwak kiyong (@Pwnkai23), Song nuri, Nathaniel Oh (@calysteon),\nan anonymous researcher\n\nAPFS\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112536: Ruslan Dautov, Kwak Kiyong (@Pwnkai23), Song Nuri,\nThanatos Tian (HKPolyU) \u0026 wgg with Diffract, Narendra Singh (@_3P1C),\nThomas Guillem\n\nAPFS\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan\nDautov, Peter Malone\n\nApp Store\nAvailable for: macOS Golden Gate\nImpact: An app may be able to bypass network restrictions\nDescription: This issue was addressed with improved checks.\nCVE-2026-112467: Sindre Sorhus\n\nApp Store\nAvailable for: macOS Golden Gate\nImpact: A remote attacker may be able to break out of the WebContent\nsandbox\nDescription: This issue was addressed with improved input validation.\nCVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nApple Neural Engine\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112696: Jaeyeong Lee\n\nApple Neural Engine\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84494: Meta Red Team X - Nik Tsytsarkin\n\nAppleAVD\nAvailable for: macOS Golden Gate\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-112704: Josh Maine of Calif.io\n\nAppleAVD\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology,\nInc, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta\nRed Team X - Nik Tsytsarkin\n\nAppleAVD\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-112415: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Rahul Raj\n\nAppleAVD\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination or corrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-112454: @Licht_jb, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAppleMobileFileIntegrity\nAvailable for: macOS Golden Gate\nImpact: A malicious app may be able to read or write to protected files\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nAppleRAID\nAvailable for: macOS Golden Gate\nImpact: Mounting a malicious disk image may cause unexpected system\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112544: Peter Malone\n\nAppleRAID\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)\n\nArchive Utility\nAvailable for: macOS Golden Gate\nImpact: An attacker with root privileges may be able to access protected\nuser data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps\nInc.\n\nArchiveService\nAvailable for: macOS Golden Gate\nImpact: An app may bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul\nMontgomery (@nullevent)\n\nArchiveService\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted file may bypass Gatekeeper\nchecks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-112568: an anonymous researcher\n\nAudio\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx\n(@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding),\nNathaniel Oh (@calysteon)\n\nAudio\nAvailable for: macOS Golden Gate\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud\n\nAVEVideoEncoder\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io\n\nAVEVideoEncoder\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112689: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBluetooth\nAvailable for: macOS Golden Gate\nImpact: An attacker in physical proximity may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\nvalidation.\nCVE-2026-112566: Chris Bailey - Short Circuit\n\nBOM\nAvailable for: macOS Golden Gate\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: The issue was addressed with improved checks.\nCVE-2026-112672: \uc900\uc6b0 \uc774, Pasquale Scola\n\nBOM\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted file may lead to heap\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112670: Bhaswanth Chigurupati\n\nCalendar\nAvailable for: macOS Golden Gate\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCalendar\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted calendar invitation may lead to\nmemory corruption\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112619: Ivan Fratric of Google Project Zero\n\nCarbon Core\nAvailable for: macOS Golden Gate\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-86941: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCloudKit\nAvailable for: macOS Golden Gate\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86896: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nColorSync\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: The issue was addressed with improved checks.\nCVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X\n- - Nik Tsytsarkin\n\nColorSync\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted file may disclose process\nmemory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112429: Mateusz Jurczyk of Google Project Zero\n\nCompression\nAvailable for: macOS Golden Gate\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nconfigd\nAvailable for: macOS Golden Gate\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger\n\u0026 Ro Achterberg of Nosebeard Labs\n\nControl Center\nAvailable for: macOS Golden Gate\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat\nSrisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,\nLakshay Sharma (MrW0r57)\n\nCore Image\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted image may lead to unexpected\nprocess termination\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112471: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Golden Gate\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-113912: an anonymous researcher, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Roman\nZabicki, Anna Groza (@pwnlambda) of Calif.io\n\nCoreAudio\nAvailable for: macOS Golden Gate\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescr"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T07:29:57Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/42"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Oct/42"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/149521"
},
{
"url": "https://support.apple.com/downloads/"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Oct/42"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-10-26-2026-4 macOS Golden Gate 27.2",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2022-26704",
"type": "related"
},
{
"destId": "CVE-2026-112410",
"type": "related"
},
{
"destId": "CVE-2026-112413",
"type": "related"
},
{
"destId": "CVE-2026-112414",
"type": "related"
},
{
"destId": "CVE-2026-112415",
"type": "related"
},
{
"destId": "CVE-2026-112416",
"type": "related"
},
{
"destId": "CVE-2026-112421",
"type": "related"
},
{
"destId": "CVE-2026-112423",
"type": "related"
},
{
"destId": "CVE-2026-112424",
"type": "related"
},
{
"destId": "CVE-2026-112425",
"type": "related"
},
{
"destId": "CVE-2026-112427",
"type": "related"
},
{
"destId": "CVE-2026-112428",
"type": "related"
},
{
"destId": "CVE-2026-112429",
"type": "related"
},
{
"destId": "CVE-2026-112430",
"type": "related"
},
{
"destId": "CVE-2026-112432",
"type": "related"
},
{
"destId": "CVE-2026-112434",
"type": "related"
},
{
"destId": "CVE-2026-112437",
"type": "related"
},
{
"destId": "CVE-2026-112438",
"type": "related"
},
{
"destId": "CVE-2026-112441",
"type": "related"
},
{
"destId": "CVE-2026-112442",
"type": "related"
},
{
"destId": "CVE-2026-112443",
"type": "related"
},
{
"destId": "CVE-2026-112444",
"type": "related"
},
{
"destId": "CVE-2026-112446",
"type": "related"
},
{
"destId": "CVE-2026-112447",
"type": "related"
},
{
"destId": "CVE-2026-112449",
"type": "related"
},
{
"destId": "CVE-2026-112451",
"type": "related"
},
{
"destId": "CVE-2026-112453",
"type": "related"
},
{
"destId": "CVE-2026-112454",
"type": "related"
},
{
"destId": "CVE-2026-112455",
"type": "related"
},
{
"destId": "CVE-2026-112456",
"type": "related"
},
{
"destId": "CVE-2026-112457",
"type": "related"
},
{
"destId": "CVE-2026-112459",
"type": "related"
},
{
"destId": "CVE-2026-112461",
"type": "related"
},
{
"destId": "CVE-2026-112462",
"type": "related"
},
{
"destId": "CVE-2026-112464",
"type": "related"
},
{
"destId": "CVE-2026-112466",
"type": "related"
},
{
"destId": "CVE-2026-112467",
"type": "related"
},
{
"destId": "CVE-2026-112468",
"type": "related"
},
{
"destId": "CVE-2026-112469",
"type": "related"
},
{
"destId": "CVE-2026-112470",
"type": "related"
},
{
"destId": "CVE-2026-112471",
"type": "related"
},
{
"destId": "CVE-2026-112473",
"type": "related"
},
{
"destId": "CVE-2026-112474",
"type": "related"
},
{
"destId": "CVE-2026-112475",
"type": "related"
},
{
"destId": "CVE-2026-112476",
"type": "related"
},
{
"destId": "CVE-2026-112477",
"type": "related"
},
{
"destId": "CVE-2026-112478",
"type": "related"
},
{
"destId": "CVE-2026-112479",
"type": "related"
},
{
"destId": "CVE-2026-112480",
"type": "related"
},
{
"destId": "CVE-2026-112481",
"type": "related"
},
{
"destId": "CVE-2026-112482",
"type": "related"
},
{
"destId": "CVE-2026-112483",
"type": "related"
},
{
"destId": "CVE-2026-112484",
"type": "related"
},
{
"destId": "CVE-2026-112485",
"type": "related"
},
{
"destId": "CVE-2026-112486",
"type": "related"
},
{
"destId": "CVE-2026-112487",
"type": "related"
},
{
"destId": "CVE-2026-112488",
"type": "related"
},
{
"destId": "CVE-2026-112491",
"type": "related"
},
{
"destId": "CVE-2026-112492",
"type": "related"
},
{
"destId": "CVE-2026-112493",
"type": "related"
},
{
"destId": "CVE-2026-112494",
"type": "related"
},
{
"destId": "CVE-2026-112495",
"type": "related"
},
{
"destId": "CVE-2026-112497",
"type": "related"
},
{
"destId": "CVE-2026-112498",
"type": "related"
},
{
"destId": "CVE-2026-112500",
"type": "related"
},
{
"destId": "CVE-2026-112501",
"type": "related"
},
{
"destId": "CVE-2026-112502",
"type": "related"
},
{
"destId": "CVE-2026-112504",
"type": "related"
},
{
"destId": "CVE-2026-112505",
"type": "related"
},
{
"destId": "CVE-2026-112506",
"type": "related"
},
{
"destId": "CVE-2026-112508",
"type": "related"
},
{
"destId": "CVE-2026-112510",
"type": "related"
},
{
"destId": "CVE-2026-112511",
"type": "related"
},
{
"destId": "CVE-2026-112512",
"type": "related"
},
{
"destId": "CVE-2026-112513",
"type": "related"
},
{
"destId": "CVE-2026-112514",
"type": "related"
},
{
"destId": "CVE-2026-112515",
"type": "related"
},
{
"destId": "CVE-2026-112516",
"type": "related"
},
{
"destId": "CVE-2026-112517",
"type": "related"
},
{
"destId": "CVE-2026-112518",
"type": "related"
},
{
"destId": "CVE-2026-112519",
"type": "related"
},
{
"destId": "CVE-2026-112521",
"type": "related"
},
{
"destId": "CVE-2026-112522",
"type": "related"
},
{
"destId": "CVE-2026-112523",
"type": "related"
},
{
"destId": "CVE-2026-112524",
"type": "related"
},
{
"destId": "CVE-2026-112525",
"type": "related"
},
{
"destId": "CVE-2026-112526",
"type": "related"
},
{
"destId": "CVE-2026-112529",
"type": "related"
},
{
"destId": "CVE-2026-112530",
"type": "related"
},
{
"destId": "CVE-2026-112531",
"type": "related"
},
{
"destId": "CVE-2026-112532",
"type": "related"
},
{
"destId": "CVE-2026-112533",
"type": "related"
},
{
"destId": "CVE-2026-112534",
"type": "related"
},
{
"destId": "CVE-2026-112535",
"type": "related"
},
{
"destId": "CVE-2026-112536",
"type": "related"
},
{
"destId": "CVE-2026-112537",
"type": "related"
},
{
"destId": "CVE-2026-112539",
"type": "related"
},
{
"destId": "CVE-2026-112540",
"type": "related"
},
{
"destId": "CVE-2026-112541",
"type": "related"
},
{
"destId": "CVE-2026-112542",
"type": "related"
},
{
"destId": "CVE-2026-112543",
"type": "related"
},
{
"destId": "CVE-2026-112544",
"type": "related"
},
{
"destId": "CVE-2026-112545",
"type": "related"
},
{
"destId": "CVE-2026-112546",
"type": "related"
},
{
"destId": "CVE-2026-112548",
"type": "related"
},
{
"destId": "CVE-2026-112550",
"type": "related"
},
{
"destId": "CVE-2026-112551",
"type": "related"
},
{
"destId": "CVE-2026-112552",
"type": "related"
},
{
"destId": "CVE-2026-112553",
"type": "related"
},
{
"destId": "CVE-2026-112554",
"type": "related"
},
{
"destId": "CVE-2026-112555",
"type": "related"
},
{
"destId": "CVE-2026-112556",
"type": "related"
},
{
"destId": "CVE-2026-112557",
"type": "related"
},
{
"destId": "CVE-2026-112558",
"type": "related"
},
{
"destId": "CVE-2026-112559",
"type": "related"
},
{
"destId": "CVE-2026-112561",
"type": "related"
},
{
"destId": "CVE-2026-112562",
"type": "related"
},
{
"destId": "CVE-2026-112563",
"type": "related"
},
{
"destId": "CVE-2026-112565",
"type": "related"
},
{
"destId": "CVE-2026-112566",
"type": "related"
},
{
"destId": "CVE-2026-112567",
"type": "related"
},
{
"destId": "CVE-2026-112568",
"type": "related"
},
{
"destId": "CVE-2026-112569",
"type": "related"
},
{
"destId": "CVE-2026-112570",
"type": "related"
},
{
"destId": "CVE-2026-112571",
"type": "related"
},
{
"destId": "CVE-2026-112575",
"type": "related"
},
{
"destId": "CVE-2026-112576",
"type": "related"
},
{
"destId": "CVE-2026-112577",
"type": "related"
},
{
"destId": "CVE-2026-112595",
"type": "related"
},
{
"destId": "CVE-2026-112596",
"type": "related"
},
{
"destId": "CVE-2026-112599",
"type": "related"
},
{
"destId": "CVE-2026-112604",
"type": "related"
},
{
"destId": "CVE-2026-112606",
"type": "related"
},
{
"destId": "CVE-2026-112607",
"type": "related"
},
{
"destId": "CVE-2026-112614",
"type": "related"
},
{
"destId": "CVE-2026-112615",
"type": "related"
},
{
"destId": "CVE-2026-112616",
"type": "related"
},
{
"destId": "CVE-2026-112617",
"type": "related"
},
{
"destId": "CVE-2026-112619",
"type": "related"
},
{
"destId": "CVE-2026-112620",
"type": "related"
},
{
"destId": "CVE-2026-112621",
"type": "related"
},
{
"destId": "CVE-2026-112622",
"type": "related"
},
{
"destId": "CVE-2026-112623",
"type": "related"
},
{
"destId": "CVE-2026-112624",
"type": "related"
},
{
"destId": "CVE-2026-112625",
"type": "related"
},
{
"destId": "CVE-2026-112626",
"type": "related"
},
{
"destId": "CVE-2026-112627",
"type": "related"
},
{
"destId": "CVE-2026-112628",
"type": "related"
},
{
"destId": "CVE-2026-112629",
"type": "related"
},
{
"destId": "CVE-2026-112630",
"type": "related"
},
{
"destId": "CVE-2026-112632",
"type": "related"
},
{
"destId": "CVE-2026-112633",
"type": "related"
},
{
"destId": "CVE-2026-112634",
"type": "related"
},
{
"destId": "CVE-2026-112637",
"type": "related"
},
{
"destId": "CVE-2026-112638",
"type": "related"
},
{
"destId": "CVE-2026-112639",
"type": "related"
},
{
"destId": "CVE-2026-112640",
"type": "related"
},
{
"destId": "CVE-2026-112642",
"type": "related"
},
{
"destId": "CVE-2026-112647",
"type": "related"
},
{
"destId": "CVE-2026-112651",
"type": "related"
},
{
"destId": "CVE-2026-112652",
"type": "related"
},
{
"destId": "CVE-2026-112653",
"type": "related"
},
{
"destId": "CVE-2026-112654",
"type": "related"
},
{
"destId": "CVE-2026-112655",
"type": "related"
},
{
"destId": "CVE-2026-112656",
"type": "related"
},
{
"destId": "CVE-2026-112658",
"type": "related"
},
{
"destId": "CVE-2026-112659",
"type": "related"
},
{
"destId": "CVE-2026-112660",
"type": "related"
},
{
"destId": "CVE-2026-112665",
"type": "related"
},
{
"destId": "CVE-2026-112666",
"type": "related"
},
{
"destId": "CVE-2026-112668",
"type": "related"
},
{
"destId": "CVE-2026-112669",
"type": "related"
},
{
"destId": "CVE-2026-112670",
"type": "related"
},
{
"destId": "CVE-2026-112671",
"type": "related"
},
{
"destId": "CVE-2026-112672",
"type": "related"
},
{
"destId": "CVE-2026-112673",
"type": "related"
},
{
"destId": "CVE-2026-112675",
"type": "related"
},
{
"destId": "CVE-2026-112676",
"type": "related"
},
{
"destId": "CVE-2026-112677",
"type": "related"
},
{
"destId": "CVE-2026-112678",
"type": "related"
},
{
"destId": "CVE-2026-112679",
"type": "related"
},
{
"destId": "CVE-2026-112680",
"type": "related"
},
{
"destId": "CVE-2026-112682",
"type": "related"
},
{
"destId": "CVE-2026-112683",
"type": "related"
},
{
"destId": "CVE-2026-112684",
"type": "related"
},
{
"destId": "CVE-2026-112685",
"type": "related"
},
{
"destId": "CVE-2026-112686",
"type": "related"
},
{
"destId": "CVE-2026-112688",
"type": "related"
},
{
"destId": "CVE-2026-112689",
"type": "related"
},
{
"destId": "CVE-2026-112690",
"type": "related"
},
{
"destId": "CVE-2026-112693",
"type": "related"
},
{
"destId": "CVE-2026-112695",
"type": "related"
},
{
"destId": "CVE-2026-112696",
"type": "related"
},
{
"destId": "CVE-2026-112697",
"type": "related"
},
{
"destId": "CVE-2026-112698",
"type": "related"
},
{
"destId": "CVE-2026-112699",
"type": "related"
},
{
"destId": "CVE-2026-112704",
"type": "related"
},
{
"destId": "CVE-2026-112705",
"type": "related"
},
{
"destId": "CVE-2026-112708",
"type": "related"
},
{
"destId": "CVE-2026-113896",
"type": "related"
},
{
"destId": "CVE-2026-113897",
"type": "related"
},
{
"destId": "CVE-2026-113898",
"type": "related"
},
{
"destId": "CVE-2026-113899",
"type": "related"
},
{
"destId": "CVE-2026-113900",
"type": "related"
},
{
"destId": "CVE-2026-113901",
"type": "related"
},
{
"destId": "CVE-2026-113903",
"type": "related"
},
{
"destId": "CVE-2026-113904",
"type": "related"
},
{
"destId": "CVE-2026-113907",
"type": "related"
},
{
"destId": "CVE-2026-113909",
"type": "related"
},
{
"destId": "CVE-2026-113910",
"type": "related"
},
{
"destId": "CVE-2026-113912",
"type": "related"
},
{
"destId": "CVE-2026-113913",
"type": "related"
},
{
"destId": "CVE-2026-113915",
"type": "related"
},
{
"destId": "CVE-2026-113934",
"type": "related"
},
{
"destId": "CVE-2026-113935",
"type": "related"
},
{
"destId": "CVE-2026-113936",
"type": "related"
},
{
"destId": "CVE-2026-113937",
"type": "related"
},
{
"destId": "CVE-2026-113938",
"type": "related"
},
{
"destId": "CVE-2026-113939",
"type": "related"
},
{
"destId": "CVE-2026-113940",
"type": "related"
},
{
"destId": "CVE-2026-113941",
"type": "related"
},
{
"destId": "CVE-2026-113942",
"type": "related"
},
{
"destId": "CVE-2026-113943",
"type": "related"
},
{
"destId": "CVE-2026-113944",
"type": "related"
},
{
"destId": "CVE-2026-113945",
"type": "related"
},
{
"destId": "CVE-2026-113946",
"type": "related"
},
{
"destId": "CVE-2026-113947",
"type": "related"
},
{
"destId": "CVE-2026-113948",
"type": "related"
},
{
"destId": "CVE-2026-113949",
"type": "related"
},
{
"destId": "CVE-2026-113950",
"type": "related"
},
{
"destId": "CVE-2026-113952",
"type": "related"
},
{
"destId": "CVE-2026-65327",
"type": "related"
},
{
"destId": "CVE-2026-65350",
"type": "related"
},
{
"destId": "CVE-2026-65384",
"type": "related"
},
{
"destId": "CVE-2026-65397",
"type": "related"
},
{
"destId": "CVE-2026-84494",
"type": "related"
},
{
"destId": "CVE-2026-84495",
"type": "related"
},
{
"destId": "CVE-2026-84496",
"type": "related"
},
{
"destId": "CVE-2026-84590",
"type": "related"
},
{
"destId": "CVE-2026-86896",
"type": "related"
},
{
"destId": "CVE-2026-86925",
"type": "related"
},
{
"destId": "CVE-2026-86936",
"type": "related"
},
{
"destId": "CVE-2026-86937",
"type": "related"
},
{
"destId": "CVE-2026-86939",
"type": "related"
},
{
"destId": "CVE-2026-86941",
"type": "related"
},
{
"destId": "CVE-2026-86943",
"type": "related"
},
{
"destId": "CVE-2026-86945",
"type": "related"
},
{
"destId": "CVE-2026-86946",
"type": "related"
},
{
"destId": "CVE-2026-86968",
"type": "related"
},
{
"destId": "CVE-2026-86969",
"type": "related"
},
{
"destId": "CVE-2026-86970",
"type": "related"
},
{
"destId": "CVE-2026-86971",
"type": "related"
},
{
"destId": "CVE-2026-86972",
"type": "related"
},
{
"destId": "CVE-2026-86973",
"type": "related"
},
{
"destId": "CVE-2026-86974",
"type": "related"
},
{
"destId": "CVE-2026-86978",
"type": "related"
},
{
"destId": "CVE-2026-86984",
"type": "related"
},
{
"destId": "CVE-2026-86985",
"type": "related"
},
{
"destId": "CVE-2026-86986",
"type": "related"
},
{
"destId": "CVE-2026-86988",
"type": "related"
},
{
"destId": "CVE-2026-86990",
"type": "related"
},
{
"destId": "CVE-2026-86991",
"type": "related"
},
{
"destId": "CVE-2026-86992",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0456",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/42",
"automated": true,
"contentSha256": "719f8cbf0a79de5bd2cb1371f0cdce75f58a41089402b2b6adab623333c80409",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/42",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-10-26T21:41:27Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0456"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-02T07:29:57Z",
"dateUpdated": "2026-11-02T07:29:57Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0456"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.