What is the CVSS score of CVE-2026-64712?

CVE-2026-64712 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Apple are affected by CVE-2026-64712?

Apple has released fixes for a local privilege-escalation flaw in macOS that allows an ordinary application to gain root-level control of an affected Mac; every Mac fleet running macOS versions below…. A patch is available.

How to fix or mitigate CVE-2026-64712?

Within 24 hours, confirm which macOS versions are deployed across the fleet and flag all devices below Sequoia 15.8, Tahoe 26.7 and Golden Gate 27; verify MDM/endpoint-management coverage so every Mac is reachable and begin pushing Apple's vendor-released updates for the applicable release line to the highest-risk populations first (executives, engineers, administrators and any user with access to sensitive data), while reminding users not to install unvetted applications or grant unexpected authorization prompts. Within 7 days, complete updates for at least 90% of affected devices, target 100% for privileged and high-value users, report delinquent devices to management for follow-up, and confirm that endpoint detection and least-privilege controls are logging local privilege-escalation behavior so any abuse of the flaw is detectable. Within 30 days, close out remaining exceptions with documented risk acceptance or device replacement, validate via a compliance scan that no production Mac remains below the fixed versions, and fold this update into your standard macOS patch baseline and monthly vulnerability-reporting cycle. Note: Apple's fixes target macOS Sequoia 15.8, macOS Tahoe 26.7 and macOS Golden Gate 27; devices on unsupported older releases should be upgraded to a supported line.

Apple CVE-2026-64712

EUVD-2026-78012 HIGH

Improper Access Control (CWE-284)

2026-09-14 apple

GHSA-g24q-xv6q-hv95

Authentication Bypass Apple

7.8

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 10:37 vuln.today

CVSS changed

Sep 14, 2026 - 23:22 NVD

7.8 (HIGH)

Patch available

Sep 14, 2026 - 22:19 EUVD

CVE Published

Sep 14, 2026 - 20:48 cve.org

HIGH 7.8

CVE Published

Sep 14, 2026 - 20:48 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

AnalysisAI

Apple macOS contains a local privilege-escalation flaw in which an application running under an ordinary user account can abuse insufficient access-control checks to obtain root privileges. Devices are affected if they run macOS versions below Sequoia 15.8, Tahoe 26.7 or Golden Gate 27, and Apple has shipped fixes for all three release lines. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, confirm which macOS versions are deployed across the fleet and flag all devices below Sequoia 15.8, Tahoe 26.7 and Golden Gate 27; verify MDM/endpoint-management coverage so every Mac is reachable and begin pushing Apple's vendor-released updates for the applicable release line to the highest-risk populations first (executives, engineers, administrators and any user with access to sensitive data), while reminding users not to install unvetted applications or grant unexpected authorization prompts. …

Threat intelligence, references, and detailed analysis are available after sign-in.