This article was published on October 29, 2026.

Preface: In the latest macOS Golden Gate 27.2 security update, Apple has addressed several critical vulnerabilities related to memory handling and memory safety. Specifically, at the kernel level, the company has implemented a fix for a vulnerability (CVE-2026-113910) that could lead to the leakage of kernel memory, by improving memory handling mechanisms and ensuring proper initialization.

Background: In the context of the visionOS XNU kernel and the IOKit framework used by the Apple Vision Pro, io_connect_method is a fundamental Mach trapping interface that facilitates communication between user-space applications (or system services) and kernel-space IOKit drivers. The io_connect_method function functions as a gateway. A user-space client opens a connection to an IOKit service (obtaining a io_connect_t handle) and calls this function to execute specific methods implemented by the kernel driver. Referring to the accompanying infographic. CVE-2026-113910 shown a classic and serious scenario involving an information leakage (kernel infoleak) vulnerability in the context of kernel development. If a decompression routine fills only half of a buffer, but the entire buffer is subsequently copied back to user space, the “garbage data” remaining in the unoverwritten portion of the buffer will be leaked. Because this memory is allocated within kernel space, such garbage data may well contain sensitive information belonging to other processes—such as passwords, cryptographic keys, or kernel pointers. To address this, the entire kernel buffer must be zero-initialized using memset before the decompression process begins.

Vulnerability description: CVE-2026-112706 – A permissions issue was addressed with additional restrictions.
Impact: An app may be able to access sensitive user data
Available for: Apple Vision Pro (all models)

Official announcement: Please refer to the link for details –
https://support.apple.com/en-hk/149526