01 Record

CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to

CriticalKEVPUBLISHEDCNA: apple

Base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON CVE Program record

02 Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to

03 Metadata

Published

2026-08-06 18:17Z16 DAYS AGO

Last updated

2026-08-19 03:55Z3 DAYS AGO

Reserved

2026-07-22

Assigning CNA

apple

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287Improper AuthenticationClass

SSVC decision

ExploitationactiveAutomatableyesTechnical Impacttotal

KEV catalog

Added 2026-08-18 · remediation due 2026-08-21

Data version

5.2

Document digest

d3e961097bdca129e4d39a5fae6799cec0ab2137794d239f11197ca96ad94c08

04 Affected products

VendorProductVersionsPlatforms

ApplemacOS0 to < 14.8.9, 0 to < 15.7.9, 0 to < 26.6.1—

05 References

support.apple.comhttps://support.apple.com/en-us/148170
support.apple.comhttps://support.apple.com/en-us/148171
support.apple.comhttps://support.apple.com/en-us/148172
advisories.ncsc.nlhttps://advisories.ncsc.nl/2026/ncsc-2026-0280.htmlthird-party-advisory
www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400government-resource
seclists.orghttp://seclists.org/fulldisclosure/2026/Aug/36
seclists.orghttp://seclists.org/fulldisclosure/2026/Aug/37