EUVD-2026-78131
GHSA-p99c-p9x8-x86v
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary rating from Vendor (apple) · only source for this CVE.
CVSS VectorVendor: apple
Lifecycle Timeline
5DescriptionCVE.org
This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
AnalysisAI
Improper state management in Apple macOS (all versions prior to macOS 27 "Golden Gate") lets a locally installed application reach sensitive user data that normal macOS privacy and access controls are supposed to protect. The attack is local and needs the victim to launch the malicious app (AV:L, UI:R, PR:N), and the impact is confidentiality-only (C:H/I:N/A:N), which yields a moderate CVSS of 5.5. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today