Apple Security Updates - October 2026
Roundup of Apple security advisories published in October 2026.
CVE search metadata
CVE search record: CVE-2026-112427. Severity: high. CVSS: 8.1. KEV: no. Brief: Apple Security Updates - October 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-10-apple-security-updates/
CVE search record: CVE-2026-112438. Severity: high. CVSS: 8.8. KEV: no. Product: macOS. Brief: Apple Security Updates - October 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-10-apple-security-updates/
CVE search record: CVE-2026-112484. Severity: high. CVSS: 7.8. KEV: no. Brief: Apple Security Updates - October 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-10-apple-security-updates/
Triage facts
Revision 1- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 26, 23:47 UTC
- Vulnerabilities
- 3 CVEs
What's new
This roundup covers 2 Apple security vulnerabilities. CVSS base scores range from 8.1 to 8.8. None are reported as actively exploited at the time of release. The issues affect macOS.
Summary
| CVE | Product | Severity | CVSS | EPSS | KEV | Source |
|---|---|---|---|---|---|---|
| CVE-2026-112427 | n/a | High | 8.1 | no | NVD (authoritative) | |
| CVE-2026-112438 | macOS | High | 8.8 | no | NVD (authoritative) |
CVE-2026-112427
CVE-2026-112427 is an authentication vulnerability in macOS Golden Gate due to improper state management. A remote attacker could exploit this flaw to achieve arbitrary code execution on the target system.
Source: https://nvd.nist.gov/vuln/detail/CVE-2026-112427
CVE-2026-112438
A logic vulnerability in macOS versions Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 allows an unprivileged attacker to perform privilege escalation and execute arbitrary code as root by exploiting improved state management flaws.
Affected products:
- macOS