Live › vulnerability › CVE-2026-86935
Go to dashboardApple removed some extra entitlements that an app could hold on macOS. A malicious or compromised app could use them to access user-sensitive data it should not reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Mac users and fleets running macOS releases before Golden Gate 27 are exposed, since the entitlement removal ships only in that release. The sources do not say which earlier builds are affected or which apps can trigger it. unknown
No product ranges from the sources yet.
sw_vers -productVersionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.
This page as .md · .json · in your agent: get_signal("CVE-2026-86935")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.