{"affected":[{"conditional":false,"product":"macos","source":"NVD","vendor":"apple","versions":[{"greaterThanOrEqual":"15.0","lessThan":"15.8.2","status":"affected","version":"*","versionType":"custom"}]},{"conditional":false,"product":"macos","source":"NVD","vendor":"apple","versions":[{"greaterThanOrEqual":"26.0","lessThan":"26.7.2","status":"affected","version":"*","versionType":"custom"}]},{"conditional":false,"product":"macos","source":"NVD","vendor":"apple","versions":[{"greaterThanOrEqual":"27.0","lessThan":"27.2","status":"affected","version":"*","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionEndExcluding":"15.8.2","versionStartIncluding":"15.0","vulnerable":true},{"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionEndExcluding":"26.7.2","versionStartIncluding":"26.0","vulnerable":true},{"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionEndExcluding":"27.2","versionStartIncluding":"27.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2026-112502","cwes":["CWE-787"],"description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause a denial-of-service.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793899107943,"publishedAt":1793049461487,"references":[{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/149521"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/149522"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/149523"}],"remediation":[],"revision":"b22ee7c48dd26931ecb7d69f410af0c127ad67e7b5275bc7b4c2d1c6ad99663d","sources":[{"modifiedAt":1793899107943,"name":"NVD","retrievedAt":1793902895566,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112502"}],"ssvc":null,"status":"published","title":"CVE-2026-112502","updatedAt":1793902895566}