Information disclosure in macOS - CVE-2026-112595
Published: October 27, 2026
Vulnerability identifier: #VU157980
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-112595
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker with physical access to system to gain access to sensitive information.
The vulnerability exists due to an unspecified weakness in the Thread component of Apple macOS when the system is accessed physically. An attacker with physical access to system can exploit this weakness through physical access to obtain sensitive information.
Affected software
macOS
Apple iOS
iPadOS
Apple iOS
iPadOS
How to mitigate CVE-2026-112595
Install update from vendor's website.
macOS - update to 27.2 26B123
Apple iOS - addressed in versions 27.2 24B119, 27.2 24B120, 27.2 24B91020
iPadOS - update to 27.2 24B119
Apple iOS - addressed in versions 27.2 24B119, 27.2 24B120, 27.2 24B91020
iPadOS - update to 27.2 24B119