EUVD-2026-78108
GHSA-vmcr-vvm6-5x2p
Severity by source
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Local sandboxed app already running gives AV:L/PR:L; escaping the sandbox crosses a trust boundary (S:C) exposing host data (C:H/I:H) with no availability impact.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionNVD
The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox.
AnalysisAI
Sandbox escape in Apple macOS lets a malicious or compromised application already running inside the macOS App Sandbox break out of that confinement and operate with privileges beyond what its sandbox profile permits (CVSS 3.1 base 8.4, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N). Affected systems are macOS releases prior to Sequoia 15.8, Tahoe 26.7, and Golden Gate 27; exploitation requires the attacker to already have local code execution as a sandboxed app (for example, one the user installed and launched), and provides no remote initial access, functioning as a boundary-crossing primitive once code is running on the host. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the attacker to already have local code execution as an application running inside the macOS App Sandbox (PR:L, AV:L) - for example, a malicious or compromised sandboxed app the user has installed and launched. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely serious local privilege/isolation flaw despite modest exploitation-probability signals. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27 fix CVE-2026-84580 - upgrade to or beyond the fixed build for whichever branch each host runs, using the Apple advisories at https://support.apple.com/en-us/149035, https://support.apple.com/en-us/149042, and https://support.apple.com/en-us/149043 to map builds to releases. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every Mac in the fleet and identify devices running macOS versions below Sequoia 15.8, Tahoe 26.7, and Golden Gate 27, prioritizing executive, engineering, and other high-value users, and confirm endpoint detection coverage on those endpoints. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today