EUVD-2026-77916
GHSA-vgw7-8855-hw2r
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Local malicious app (AV:L, PR:L for running code), no user interaction beyond launch, sandbox-bypass read of sensitive pasteboard data (C:H generous but defensible), no integrity/availability impact.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionNVD
An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
AnalysisAI
Local information disclosure in Apple macOS before Golden Gate 27 allows an installed app to bypass system pasteboard sandbox restrictions and read sensitive pasteboard data, resulting in confidentiality impact only. The flaw is not remotely exploitable; it requires attacker-controlled code already running locally, typically a malicious or compromised app that the user has installed and launched. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires attacker-controlled code already executing locally on the macOS host - specifically an app that the user has installed and run - which then abuses insufficient sandbox restrictions on system pasteboards to read data it should not access. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N = 5.5 Medium) describes a locally-exploitable authorization/sandbox flaw: a malicious or compromised app on macOS can read system pasteboard contents that should be off-limits, yielding confidentiality impact only (I:N/A:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: macOS Golden Gate 27. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today