A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
Metrics
Affected Vendors & Products
References
History
Tue, 27 Oct 2026 05:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple macos |
|
| Vendors & Products |
Apple
Apple macos |
Tue, 27 Oct 2026 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Path Parsing Vulnerability Allowing Privilege Escalation on macOS | |
| Weaknesses | CWE-20 |
Mon, 26 Oct 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. | |
| References |
|
Status: PUBLISHED
Assigner: apple
Published: 2026-10-26T20:36:50.345Z
Updated: 2026-10-26T20:36:50.345Z
Reserved: 2026-10-19T17:05:22.978Z
Link: CVE-2026-112541
No data.
Status : Received
Published: 2026-10-26T21:17:46.883
Modified: 2026-10-26T21:17:46.883
Link: CVE-2026-112541
No data.