What is the CVSS score of CVE-2026-64702?

CVE-2026-64702 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-64702?

Yes, a patch is available for CVE-2026-64702. Update the affected software to the latest version immediately.

macOS CVE-2026-64702

EUVD-2026-49625 CRITICAL

Improper Access Control (CWE-284)

2026-07-27 apple

GHSA-wp7f-vf76-9c57

Authentication Bypass Apple

9.8

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local sandbox escape requires user to run app (AV:L, UI:R); no privileges needed (PR:N).

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 19:22 vuln.today

CVSS changed

Jul 28, 2026 - 19:22 NVD

9.8 (CRITICAL)

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:12 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 27, 2026 - 20:12 cve.org

CRITICAL 9.8

DescriptionCVE.org

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.

AnalysisAI

Sandbox escape in macOS allows a malicious app to break out of its restrictions and gain full system access. Affected systems include macOS Sonoma before 14.8.8, macOS Sequoia before 15.7.8, and macOS Tahoe before 26.6. No active exploitation or public exploit code has been reported, and the EPSS exploitation probability is low at 0.16%.

Technical ContextAI

The vulnerability stems from an improper access control (CWE-284) in Apple macOS's application sandbox mechanism. The sandbox is a core security component that restricts what resources an app can access, confining it to a limited set of permitted actions. An attacker who can run a sandboxed application locally may leverage this issue to circumvent those restrictions. The flawed access checks were addressed with additional sandbox restrictions in the patched versions. CPE data identifies the affected product as Apple macOS (cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*) across multiple versions.

RemediationAI

Apply the vendor patch by upgrading to macOS Sonoma 14.8.8, macOS Sequoia 15.7.8, or macOS Tahoe 26.6. No workarounds have been provided. The updates are detailed in the Apple support pages listed in the affected products section. Administrators should prioritize these updates for endpoints where users may run untrusted applications.