Improper privilege management in macOS - CVE-2026-112457
Published: October 27, 2026
Vulnerability identifier: #VU157924
CSH Severity: High
CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-112457
CWE-ID: CWE-269
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker on the local network to escalate privileges on the system.
The vulnerability exists due to improper privilege management in the macOS Remote Management component when accessed from the local network. A remote attacker on the local network can exploit the component over the local network to escalate privileges on the system.
Affected software
macOS
How to mitigate CVE-2026-112457
Install update from vendor's website.
macOS - addressed in versions 27.2 26B123, 15.8.2 24H232, 26.7.2 25G332