EUVD-2026-78132
GHSA-m727-f48g-q9f6
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary rating from Vendor (apple) · only source for this CVE.
CVSS VectorVendor: apple
Lifecycle Timeline
5DescriptionCVE.org
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data.
AnalysisAI
Apple macOS contains an improper access-control logic flaw in state management that allows a locally running app to read protected user data outside of its intended permission scope. The issue affects macOS Sequoia, macOS Tahoe and the macOS 27 (Golden Gate) line prior to the fixed releases, and is remediated in macOS Sequoia 15.8, macOS Tahoe 26.7 and macOS Golden Gate 27. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today