Description
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
Published: 2026-09-14
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Root Privilege Elevation
Action: Patch
AI Analysis

Impact

This vulnerability allows an application to improperly elevate its privileges and gain root access on macOS. The flaw is a Permission Management weakness (CWE-284) whereby the system fails to enforce correct privilege boundaries. If exploited, the attacker can execute arbitrary code with administrative rights, potentially compromising system integrity, confidentiality, and availability.

Affected Systems

Apple macOS systems are affected, specifically those running macOS Golden Gate before version 27, macOS Sequoia before 15.8, or macOS Tahoe before 26.7. These earlier releases have not yet implemented the improved permission checks and are vulnerable to privilege escalation. Applications installed on these systems could be exploited.

Risk and Exploitability

The CVSS score of 7.8 indicates that this is a high‑severity vulnerability. The EPSS score is <1% indicating a very low likelihood of exploitation, and it is not listed in the CISA KEV catalog. Until the patch is applied, any user with access to these macOS versions could potentially gain root privileges by running a compromised app.

Generated by OpenCVE AI on September 20, 2026 at 21:49 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the macOS updates that address this privilege escalation, ensuring the system is at least macOS Golden Gate 27, Sequoia 15.8, or Tahoe 26.7.
  • Reboot the system after applying the update to load the new kernel modules and permission checks.
  • Review application permissions, removing or revoking Full Disk Access for untrusted or suspicious apps via System Settings > Privacy > Full Disk Access, and rely on Gatekeeper to prevent installation of unknown apps.

Generated by OpenCVE AI on September 20, 2026 at 21:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 22:15:00 +0000

Type Values Removed Values Added
Title Privilege Elevation via Improper Permission Checks on macOS

Wed, 16 Sep 2026 12:15:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Improper Permission Checks in macOS

Tue, 15 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Tue, 15 Sep 2026 09:00:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Improper Permission Checks in macOS

Tue, 15 Sep 2026 00:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 14 Sep 2026 23:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-15T03:56:30.757Z

Reserved: 2026-07-20T18:09:35.084Z

Link: CVE-2026-64712

cve-icon Vulnrichment

Updated: 2026-09-14T22:47:45.489Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-14T21:17:13.953

Modified: 2026-09-15T19:30:58.767

Link: CVE-2026-64712

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T22:00:09Z

Weaknesses