Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Gatekeeper checks.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-112512! We discovered a 0-day in macOS that lets you trivially bypass Gatekeeper checks for any app. A gatekeeper bypass that requires no extra interaction, with quarantine bit intact, and passes the Safari download flow. Essentially checks off all the criteria required for a complete Gatekeeper bypass on macOS, which according to Apple is worth $100K? We shall wait and see. Will def do a write-up on this soon!
macOS Gatekeeper checks downloaded apps before they open. Winfunc researcher Mufeed VH says his bypass worked even when Safari still marked the app as an internet download. Apple confirms CVE-2026-112512 and says it fixed how macOS handles file locations. The patches arrived yesterday: - Golden Gate 27.2 - Tahoe 26.7.2 - Sequoia 15.8.2 Install the macOS update through System Settings > General > Software Update. Image: Mufeed VH / Apple.
Apple's CVE record names the 3 fixed macOS releases: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112512.json Researcher's disclosure: https://x.com/mufeedvh/status/2115128285357380048