What is the CVSS score of EUVD-2026-49552?

EUVD-2026-49552 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Apple are affected by EUVD-2026-49552?

Apple macOS users face a local privilege escalation risk due to incorrect default permissions.. A patch is available.

How to fix or mitigate EUVD-2026-49552?

Within 24 hours, apply the latest macOS security update provided by Apple for this CVE. Over the next 7 days, verify that all macOS systems in the organization have received and installed the update, using centralized patch management tools. Within 30 days, review and enhance patch management procedures to ensure faster deployment of critical security patches in the future.

Apple EUVD-2026-49552

| CVE-2026-39874 HIGH

Incorrect Default Permissions (CWE-276)

2026-07-27 apple

GHSA-6wgf-59x8-7q38

Privilege Escalation Apple

7.8

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 23:00 vuln.today

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:13 cve.org

HIGH 7.8

CVE Published

Jul 27, 2026 - 20:13 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.