CVE-2026-112445

Apple has patched a vulnerability I reported that had been present for over a decade. The fix was released in macOS 27.2.

CVE-2026-112445

Of all the local privilege escalation (LPE) vulnerabilities I’ve seen, this is probably the easiest to exploit, the most straightforward, and the most bizarre—so bizarre that it makes you wonder whether it was an Apple backdoor.