EUVD-2026-77994
GHSA-cw5p-6hpw-5c77
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessTrick user into running malicious app
-
ExploitApp invokes flawed permission path
-
ExecutionWrite into protected file-system region
-
ImpactTamper with protected files / escalate foothold
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V13 - Configuration Permission assignment review
|
| Exploitation Conditions | Requires a locally-installed, running app on an affected Apple OS (iOS/iPadOS before 26.7 or 27, or macOS before Golden Gate 27 / Sequoia 15.8 / Tahoe 26.7); the malicious code executes within the normal app context and abuses the permission-assignment flaw to write protected file-system paths. Limiting factors: attack vector is local (AV:L) - no remote or network reachability; UI:R means user action is needed to install/run the app; impact is confined to integrity (file-system modification) with no confidentiality or availability effect. Patched builds close the hole with additional restrictions. |
| Impact | This is a moderate, not urgent, priority. The provided CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N = 5.5) is internally consistent with the description: a locally-installed app achieves a high-integrity impact (writing to protected file-system regions) with no confidentiality or availability effect. All signals point AWAY from mass exploitation: EPSS is 0.17% (7th percentile), the CVE is NOT in CISA KEV, and no public POC is referenced. No SSVC record is provided. One clear metadata conflict: the input Tag 'Information Disclosure' contradicts the CVSS vector, which shows C:N/I:H - this is a file-system integrity/permissions flaw, not a disclosure issue; treat the tag as mislabeled. Attack vector is genuinely local (AV:L) - an attacker must already be running code as an app on the device, so this is a post-compromise sandbox/permission-escape primitive rather than a remote entry point. No vendor CVSS vector conflicts with the description. |
| Exploit ScenarioDerived | A user is convinced to install a malicious or trojanized app from a non-App-Store channel (or a sandboxed app is repurposed by an attacker). Once running, the app abuses the incorrect permission assignment to write into normally protected areas of the file system, tampering with files it should not be able to reach. No public exploit code is identified at time of analysis, and exploitation requires local app execution plus user interaction. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 16, 2026
A local permission-assignment flaw in Apple's mobile and desktop operating systems lets an app installed on the device modify protected parts of the file system, giving it an integrity-only foothold outside its normal sandbox boundaries. Affected platforms are iOS and iPadOS before 26.7 and 27, and macOS before Golden Gate 27, Sequoia 15.8, and Tahoe 26.7; exploitation requires a locally-installed, running app plus user interaction (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N), with no confidentiality or availability impact and no remote or network reachability. There is no public exploit code identified at time of analysis and no confirmed active exploitation (CISA KEV), and EPSS sits at 0.17% (7th percentile), so this is a moderate, not urgent, priority that is addressed by vendor-released updates.
RemediationAI
Vendor-released patches are available: update iOS and iPadOS to 26.7 (or to 27), macOS Sequoia to 15.8, macOS Tahoe to 26.7, and macOS Golden Gate to 27, per the Apple advisories at https://support.apple.com/en-us/149034, https://support.apple.com/en-us/149035, https://support.apple.com/en-us/149041, https://support.apple.com/en-us/149042, and https://support.apple.com/en-us/149043. Because the attack requires a locally-installed, running app and user interaction (UI:R), the effective interim mitigations are preventive rather than network-based: restrict users from installing unvetted or sideloaded applications and tighten Mobile Device Management app-installation policy, since no firewall rule, port block, or network control can address an AV:L issue - the trade-off is reduced flexibility for power users and developers. Enterprise Fleets and individuals that cannot patch immediately should also avoid opening untrusted app packages or enterprise-signed builds on affected devices, and should monitor for unexpected changes to system-level configuration files on macOS hosts. No public exploit code has been identified, so emergency out-of-band change windows are not required, but the update should be folded into the next regular patch cycle given the integrity-only, user-assisted exploitation profile.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The weakness is classified as CWE-732, Incorrect Permission Assignment for Critical Resource: the operating system's permission model granted an app-context process access to file-system paths that should have been reserved for the system or for higher-privileged components, rather than enforcing the sandbox boundary that normally restricts third-party apps to their container. Apple's fix adds 'additional restrictions' to that permission assignment, meaning the code path that handed out write access to the protected location was tightened rather than the file-system layout being redesigned. The CPE data (cpe:2.3:a:apple:ios_and_ipados:* and cpe:2.3:a:apple:macos:*) confirms the flaw spans both the shared iOS/iPadOS codebase and the macOS line, consistent with a common permission-handling component rather than a product-specific feature. The vector AV:L/PR:N/UI:R is the expected profile for a sandbox-escape class bug delivered by a rogue or trojanized app: the attacker needs no credentials or elevated privileges, but must already be running code on the target through an app the user launched or installed. Because the assessed impact is I:H with C:N and A:N, the primitive is file-system tampering - potential persistence or configuration modification - not data exfiltration.
Know when macOS gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Local app execution (AV:L, PR:N as any sandboxed app), user must install/run it (UI:R); impact is protected-file write so I:H, with C:N/A:N.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
4DescriptionCVE.org
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility develope
Out-of-bounds write in Apple's iOS, iPadOS, and macOS file-parsing code lets remote attackers achieve arbitrary code exe
Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
A logic issue was addressed with improved restrictions. Rated high severity (CVSS 7.8), this vulnerability is no authent
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
A race condition was addressed with additional validation. Rated high severity (CVSS 7.0), this vulnerability is no auth
This issue was addressed with improved checks. Rated critical severity (CVSS 10.0), this vulnerability is remotely explo
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from
Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This i
A vulnerability was found in LibTIFF. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no aut
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. Rated high severity (CVSS 8.8), this
Exploit-DB