EUVD-2026-77939
GHSA-f6f2-7frp-3r3p
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (apple) · only source for this CVE.
CVSS VectorVendor: apple
Lifecycle Timeline
5DescriptionCVE.org
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
AnalysisAI
Local privilege escalation in Apple macOS lets a low-privileged local process obtain root via improper path validation (CWE-22), affecting macOS versions prior to Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. Apple addressed the flaw with improved path validation, and the CVSS 7.8 vector (AV:L/AC:L/PR:L/UI:N, total CIA impact) reflects a reliable but non-automatable local escalation requiring an existing code-execution foothold. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today