by Kastro
Paper/Archive/CVE-2026-65381

CVE-2026-65381

Apple macOS — A validation issue existed in the entitlement verification.

EPSS 0.3%CVSS 10.0
critical.is priorityof 100
36
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 28.5.285 × 205.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.

Affected

ProductAffectedFixed inSource
macOS< 15.815.8CNA
macOS< 26.726.7CNA
macOS< 2727CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADP8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.apple.com/en-us/149035refsupport.apple.com/en-us/149042refsupport.apple.com/en-us/149043