Live › vulnerability › CVE-2026-84542
Go to dashboardApple macOS has an access control flaw that lets an app read files outside its sandbox. An attacker who gets a malicious or compromised app running on the Mac can read user files the app should not reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Any Mac running a macOS version older than the fixed releases named in the sources is affected. The sources do not say which earlier builds are vulnerable beyond that, or whether a specific app or configuration is required.
No product ranges from the sources yet.
sw_vers, then compare it to the fixed builds named in the sources.27 (macOS Golden Gate), 15.8.2 (macOS Sequoia), or 26.7.2 (macOS Tahoe), or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read files outside of its sandbox.
This page as .md · .json · in your agent: get_signal("CVE-2026-84542")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.