Live › vulnerability › CVE-2026-65392
Go to dashboardApple fixed a permissions issue in macOS that let an app already running with root privileges access private information. The fix is in macOS Golden Gate 27, Sequoia 15.8.2 and Tahoe 26.7.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs running macOS releases before the fixed versions. The attacker must already have root privileges on the machine, so the exposure is mainly for systems where untrusted software runs as root. Machines already fully patched can skip it.
No product ranges from the sources yet.
15.8.2 or macOS Tahoe 26.7 (or later).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7. An app with root privileges may be able to access private information.
This page as .md · .json · in your agent: get_signal("CVE-2026-65392")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.