What is the CVSS score of EUVD-2026-49561?

EUVD-2026-49561 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-49561?

Yes, a patch is available for EUVD-2026-49561. Update the affected software to the latest version immediately.

Apple EUVD-2026-49561

| CVE-2026-39875 HIGH

Incorrect Default Permissions (CWE-276)

2026-07-27 apple

GHSA-cvfc-pf53-87qw

Privilege Escalation Apple

7.8

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 23:01 vuln.today

CVSS changed

Jul 27, 2026 - 22:22 NVD

7.8 (None) 7.8 (HIGH)

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:14 cve.org

HIGH 7.8

CVE Published

Jul 27, 2026 - 20:14 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

AnalysisAI

A local privilege escalation vulnerability in macOS allows a malicious app to gain root privileges by exploiting incorrect default permissions. Affected macOS versions are prior to Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. No active exploitation or public exploit code has been reported, though the high CVSS score reflects potential for complete system compromise.