Apple EUVD-2026-78012

Apple has released fixes for a local privilege-escalation flaw in macOS that allows an ordinary application to gain root-level control of an affected Mac; every Mac fleet running macOS versions below Sequoia 15.8, Tahoe 26.7 or Golden Gate 27 is exposed until updated. Because the flaw requires an attacker to already have a foothold on the device, the practical risk is that malware, a compromised user account or an insider can silently turn limited access into full administrative control of the endpoint, undermining the security of corporate data, credentials and management agents on that machine. Leadership should treat this as a priority patch-and-harden cycle for Mac endpoints rather than an emergency incident, since no active exploitation or public exploit code has been identified.

Within 24 hours, confirm which macOS versions are deployed across the fleet and flag all devices below Sequoia 15.8, Tahoe 26.7 and Golden Gate 27; verify MDM/endpoint-management coverage so every Mac is reachable and begin pushing Apple's vendor-released updates for the applicable release line to the highest-risk populations first (executives, engineers, administrators and any user with access to sensitive data), while reminding users not to install unvetted applications or grant unexpected authorization prompts. Within 7 days, complete updates for at least 90% of affected devices, target 100% for privileged and high-value users, report delinquent devices to management for follow-up, and confirm that endpoint detection and least-privilege controls are logging local privilege-escalation behavior so any abuse of the flaw is detectable. Within 30 days, close out remaining exceptions with documented risk acceptance or device replacement, validate via a compliance scan that no production Mac remains below the fixed versions, and fold this update into your standard macOS patch baseline and monthly vulnerability-reporting cycle. Note: Apple's fixes target macOS Sequoia 15.8, macOS Tahoe 26.7 and macOS Golden Gate 27; devices on unsupported older releases should be upgraded to a supported line.

Apply vendor patch.