Permissions, Privileges, and Access Controls in macOS - CVE-2026-112542
Published: October 27, 2026
Vulnerability identifier: #VU157915
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-112542
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to potentially bypass access restrictions and gain unauthorized access to resources or operations.
The vulnerability exists due to improper management of permissions, privileges, or access controls in the ppp component of Apple macOS when handling operations initiated by a local application. A local user can use a local application to potentially access resources or perform operations without appropriate authorization.
Affected software
macOS
How to mitigate CVE-2026-112542
Install update from vendor's website.
macOS - addressed in versions 27.2 26B123, 15.8.2 24H232, 26.7.2 25G332