BaselineWatch
Desk

CVE-2026-112568

unscored Awaiting Analysis

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may bypass Gatekeeper checks.

Fix

STIG rules that mitigate this class

With Gatekeeper enforced, an unsigned or unnotarised app does not run, which is the step most Gatekeeper bypasses need. Apple Platform Security, "Gatekeeper and runtime protection in macOS" (the owner's mapping, data/mitigations.yaml: gatekeeper)

  • APPL-15-002064 CAT I The macOS system must enable gatekeeper. Apple macOS 15 (Sequoia)
  • APPL-26-002064 CAT I The macOS system must enable gatekeeper. Apple macOS 26 (Tahoe)

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 3

  1. StatusPublished → Awaiting AnalysisNVD modified 2026-10-27 14:53
  2. StatusReceived → PublishedNVD modified 2026-10-26 20:44
  3. First seenunscoredNVD modified 2026-10-26 21:17

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 3