What is GHSA-pq2v-cxc7-ccf9?

GHSA-pq2v-cxc7-ccf9 is a security advisory published by GitHub Security Advisories with Critical severity. This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden...

Which CVE IDs does GHSA-pq2v-cxc7-ccf9 cover?

GHSA-pq2v-cxc7-ccf9 covers the following CVE IDs: CVE-2026-112497. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pq2v-cxc7-ccf9?

GHSA-pq2v-cxc7-ccf9 has a CVSS v3 base score of 9.0, published by GitHub Security Advisories.

GHSA-pq2v-cxc7-ccf9CriticalCVSS 9.0

This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden...

Vendor

GitHub Security Advisories

Published

October 26, 2026

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-112497 →

📋 Description

This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-112497
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522
https://support.apple.com/en-us/149523
https://github.com/advisories/GHSA-pq2v-cxc7-ccf9