EUVD-2026-15039
GHSA-8cv4-qwjg-mxw5
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionCVE.org
A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate privileges.
AnalysisAI
A logic flaw in macOS Tahoe allows local users to elevate their privileges through improved checks that were insufficient in earlier versions. This vulnerability affects macOS versions prior to 26.4 and enables privilege escalation attacks from standard user accounts to higher privilege levels. Apple has patched this issue in macOS Tahoe 26.4, and no active exploitation or public proof-of-concept code has been reported.
Technical ContextAI
The vulnerability resides in macOS Tahoe's privilege management logic, specifically in access control checks that validate user permission levels. The flaw is classified as a logic issue (CWE category relating to improper validation and authorization checks) where the implemented checks failed to properly restrict privileged operations. This affects the Apple macOS operating system across multiple versions prior to 26.4, as indicated by the CPE string cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*. The root cause involves inadequate verification of user credentials or permissions before granting elevated access, allowing a local attacker with standard user privileges to bypass authorization controls.
RemediationAI
Immediately upgrade to macOS Tahoe 26.4 or later, which contains the corrected privilege escalation checks. This is the primary and definitive remediation. Organizations should prioritize patching systems according to their change management procedures, prioritizing systems where local user accounts have access. Until patching is completed, restrict physical and remote access to affected macOS systems to trusted administrators only, disable unnecessary local user accounts, and monitor system logs for suspicious privilege escalation attempts using tools like macOS audit logs and endpoint detection systems. Refer to Apple's official security advisory at https://support.apple.com/en-us/126794 for detailed patching instructions and any version-specific guidance.
An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility develope
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
Remote code execution in OpenSSH's sshd server (regression of CVE-2006-5051) allows unauthenticated remote attackers to
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
A logic issue was addressed with improved restrictions. Rated high severity (CVSS 7.8), this vulnerability is no authent
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
A race condition was addressed with additional validation. Rated high severity (CVSS 7.0), this vulnerability is no auth
This issue was addressed with improved checks. Rated critical severity (CVSS 10.0), this vulnerability is remotely explo
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data t
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today