Live › vulnerability › CVE-2026-86928
Go to dashboardA path handling weakness in macOS allowed an app to reach protected user data it should not access. Apple fixed it in macOS Golden Gate 27 with improved validation.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Mac users and fleets running macOS builds before Golden Gate 27 are exposed, since the flaw sits in the operating system. The sources do not say which earlier builds are affected or whether any app needs special setup to trigger it. Teams that manage Macs should check their fleet's build versions.
No product ranges from the sources yet.
sw_vers -productVersion on the Mac and compare it with the fixed release, which the sources do not name.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-86928")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.