Live › vulnerability › CVE-2026-65368
Go to dashboardA logic flaw in macOS lets a maliciously crafted disk image skip Gatekeeper's security checks. An attacker who gets a user to open such an image could run software that macOS would normally block.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
macOS machines older than the fixed releases can be affected. Machines already on the fixed versions are not affected. The sources do not say whether managed or enterprise configurations change exposure.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed builds listed in the fix field.27 (Golden Gate), 15.8.2 (Sequoia) or 26.7.2 (Tahoe) or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted disk image may bypass Gatekeeper checks.
This page as .md · .json · in your agent: get_signal("CVE-2026-65368")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.