Vulnerability Details CVE-2026-112511
A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 39.3%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-112511
-
cpe:2.3:o:apple:macos:15.0
-
cpe:2.3:o:apple:macos:15.1
-
cpe:2.3:o:apple:macos:15.1.1
-
cpe:2.3:o:apple:macos:15.2
-
cpe:2.3:o:apple:macos:15.3
-
cpe:2.3:o:apple:macos:15.3.1
-
cpe:2.3:o:apple:macos:15.3.2
-
cpe:2.3:o:apple:macos:15.4
-
cpe:2.3:o:apple:macos:15.4.1
-
cpe:2.3:o:apple:macos:15.5
-
cpe:2.3:o:apple:macos:15.6
-
cpe:2.3:o:apple:macos:15.6.1
-
cpe:2.3:o:apple:macos:15.7
-
cpe:2.3:o:apple:macos:15.7.1
-
cpe:2.3:o:apple:macos:15.7.2
-
cpe:2.3:o:apple:macos:15.7.3
-
cpe:2.3:o:apple:macos:15.7.4
-
cpe:2.3:o:apple:macos:15.7.5
-
cpe:2.3:o:apple:macos:15.7.7
-
cpe:2.3:o:apple:macos:15.7.8
-
cpe:2.3:o:apple:macos:15.7.9
-
cpe:2.3:o:apple:macos:15.8
-
cpe:2.3:o:apple:macos:15.8.1
-
cpe:2.3:o:apple:macos:27.0
-
cpe:2.3:o:apple:macos:27.0.1