PT-2026-132060
CVE-2026-112445
·
Published
2026-10-29
·
Updated
2026-10-29
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Apple has patched a vulnerability I reported that had been present for over a decade. The fix was released in macOS 27.2.
CVE-2026-112445
Of all the local privilege escalation (LPE) vulnerabilities I’ve seen, this is probably the easiest to exploit, the most straightforward, and the most bizarre—so bizarre that it makes you wonder whether it was an Apple backdoor.
Found an issue in the description? Have something to add? Feel free to write us 👾