{"id":"CVE-2026-112556","published":"2026-10-26T21:17:49.057","lastModified":"2026-10-26T23:16:59.167","description":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context.","cvssScore":4.8,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwes":["CWE-362"],"vendors":[],"products":[],"references":[{"url":"https://support.apple.com/en-us/149521","tags":[]},{"url":"https://support.apple.com/en-us/149522","tags":[]},{"url":"https://support.apple.com/en-us/149523","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}