Description
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.
Published: 2026-07-27
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A race condition in macOS state handling can allow an application to gain root privileges. The issue is a concurrency flaw that can lead to elevated access for a malicious app, enabling any actions performed as the system user.

Affected Systems

Apple macOS products are affected, including all versions prior to macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6, which contain the fix.

Risk and Exploitability

The CVSS score of 7 indicates a high severity. The EPSS score of less than 1% indicates a very low, but nonzero, probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The description does not specify a particular attack vector; it is inferred that a local attacker that can run code on the system may exploit the race condition and obtain root access.

Generated by OpenCVE AI on August 3, 2026 at 16:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade macOS to at least Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6 to receive the race-condition fix.
  • After upgrading, disable or suspend any unnecessary background processes that run with elevated privileges, as they could trigger concurrent state changes.
  • Continuously monitor system and kernel logs for unexpected privilege‑escalation events and investigate any anomalies promptly.

Generated by OpenCVE AI on August 3, 2026 at 16:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 03 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Title Race Condition in macOS State Handling Allows Root Privilege Escalation

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Race Condition in macOS State Handling Allows Root Privilege Escalation

Tue, 28 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 27 Jul 2026 23:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T03:57:07.853Z

Reserved: 2026-05-01T22:46:21.642Z

Link: CVE-2026-43693

cve-icon Vulnrichment

Updated: 2026-07-27T20:55:54.960Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:16:53.163

Modified: 2026-07-29T15:46:42.090

Link: CVE-2026-43693

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T16:45:03Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')