CVE-2026-65381

macOS Entitlement Verification Bug Allowing Sandbox Escape

View on CVE.org
Published Sep 14, 2026 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.

Analysis

AI-generated

Technical impact

A validation flaw exists in macOS entitlement verification that allows a malicious application to bypass sandbox restrictions and access system resources it should not be able to reach. The flaw can lead to unauthorized reading or modification of protected files, processes, or services, threatening confidentiality, integrity, and system availability.

Affected Systems

Apple macOS is the affected vendor. The issue is addressed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

Risk and Exploitability

The CVSS score of 8.8 indicates a high severity risk. The EPSS score is reported as < 1%, and the vulnerability is not listed in the CISA KEV catalog. Attackers would typically need to run a malicious application on the target system to exploit this flaw.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the macOS update that includes the entitlement verification fix—macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7.
  • Schedule and perform timely OS upgrades as soon as the patched versions are released if an immediate upgrade is not currently possible.
  • Regularly consult Apple’s support resources or the built‑in Software Update mechanism to check for new patches addressing this vulnerability.
  • Review installed applications that require elevated entitlements and remove or quarantine any that appear suspicious or come from unverified sources.

Generated by OpenCVE AI on September 20, 2026 at 20:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title macOS Entitlement Verification Bug Allowing Sandbox Escape
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 10.0, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}
Type Values Removed Values Added
Weaknesses CWE-862
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 10.0, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}
Type Values Removed Values Added
Title Sandbox Escape via Entitlement Validation in macOS
Weaknesses CWE-280
Type Values Removed Values Added
Title Sandbox Escape via Entitlement Validation in macOS
Weaknesses CWE-280
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos
Type Values Removed Values Added
Description A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.
References
Earlier changes (2)
Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Oct 26, 2026, 8:38 PM
Reserved
Jul 22, 2026, 12:46 AM

View source JSON

Updated
Sep 17, 2026, 5:00 PM

JSON

Status
Modified
Published
Sep 14, 2026, 9:17 PM
Modified
Sep 17, 2026, 5:16 PM

View source JSON

No data.

Updated
Sep 20, 2026, 8:30 PM

JSON