EUVD-2026-78115
GHSA-53hq-q5v4-hj4c
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary rating from Vendor (apple) · only source for this CVE.
CVSS VectorVendor: apple
Lifecycle Timeline
5DescriptionCVE.org
An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data.
AnalysisAI
An improper access-control flaw in Apple macOS allows a locally running application to bypass authorization checks and read sensitive user data it should not be able to reach, with the fix delivered in macOS Sequoia 15.8 and macOS Golden Gate 27. Exploitation is local only and requires user interaction (the victim must launch the malicious or trojanized app), so the CVSS impact is limited to confidentiality (5.5 Medium). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today