Live › vulnerability › CVE-2026-86933
Go to dashboardA permissions issue in macOS let an app read information about the user's contacts, and Apple fixed it by adding sandbox restrictions. The sources do not describe the exact code path involved.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Mac users and teams running macOS releases before Golden Gate 27 are exposed, and any app installed on those machines could reach contact data. Teams whose Macs are already on Golden Gate 27 or later can skip it. The sources do not say which macOS versions are affected beyond the fix.
No product ranges from the sources yet.
sw_vers, then compare it against the fixed release named by Apple (macOS Golden Gate 27).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.
This page as .md · .json · in your agent: get_signal("CVE-2026-86933")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.