EUVD-2026-15173
GHSA-g5mw-whmc-phhw
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Lifecycle Timeline
4DescriptionCVE.org
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A document may be written to a temporary file when using print preview.
AnalysisAI
A privacy vulnerability in macOS Tahoe allows documents to be inadvertently written to temporary files during print preview operations, potentially exposing sensitive information to unauthorized access. This affects macOS versions prior to 26.4. An attacker with local file system access could retrieve unencrypted documents from temporary storage, circumventing user expectations of privacy during print operations.
Technical ContextAI
The vulnerability stems from improper handling of temporary files in the macOS print preview functionality. When users invoke print preview on documents, the system creates temporary copies to render the print layout. The root cause relates to insufficient access controls and secure deletion mechanisms for these temporary files (CWE category: Information Disclosure through insecure temporary file handling). The affected product is Apple macOS across multiple versions prior to Tahoe 26.4, as identified by the CPE cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:* notation. The vulnerability manifests in the document handling and printing subsystems rather than network-facing components.
RemediationAI
Update macOS to version Tahoe 26.4 or later immediately, following Apple's official guidance at https://support.apple.com/en-us/126794. Until patching is completed, users should avoid printing sensitive documents to preview mode and instead print directly, monitor temporary file directories (/var/tmp, /tmp) for unexpected document copies using file integrity monitoring tools, and restrict local user account access via strong authentication and principle of least privilege. Organizations should prioritize this patch for systems handling confidential or regulated information.
An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility develope
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
Remote code execution in OpenSSH's sshd server (regression of CVE-2006-5051) allows unauthenticated remote attackers to
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
A logic issue was addressed with improved restrictions. Rated high severity (CVSS 7.8), this vulnerability is no authent
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
A race condition was addressed with additional validation. Rated high severity (CVSS 7.0), this vulnerability is no auth
This issue was addressed with improved checks. Rated critical severity (CVSS 10.0), this vulnerability is remotely explo
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data t
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today