Description
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.
Published: 2026-09-14
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Potential Sandbox Escape
Action: Patch Now
AI Analysis

Impact

A validation flaw exists in macOS entitlement verification that allows a malicious application to bypass sandbox restrictions and access system resources it should not be able to reach. The flaw can lead to unauthorized reading or modification of protected files, processes, or services, threatening confidentiality, integrity, and system availability.

Affected Systems

Apple macOS is the affected vendor. The issue is addressed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

Risk and Exploitability

The CVSS score of 8.8 indicates a high severity risk. The EPSS score is reported as < 1%, and the vulnerability is not listed in the CISA KEV catalog. Attackers would typically need to run a malicious application on the target system to exploit this flaw.

Generated by OpenCVE AI on September 20, 2026 at 20:17 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the macOS update that includes the entitlement verification fix—macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7.
  • Schedule and perform timely OS upgrades as soon as the patched versions are released if an immediate upgrade is not currently possible.
  • Regularly consult Apple’s support resources or the built‑in Software Update mechanism to check for new patches addressing this vulnerability.
  • Review installed applications that require elevated entitlements and remove or quarantine any that appear suspicious or come from unverified sources.

Generated by OpenCVE AI on September 20, 2026 at 20:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
Title macOS Entitlement Verification Bug Allowing Sandbox Escape

Thu, 17 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 10.0, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Wed, 16 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-862
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 10.0, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

Wed, 16 Sep 2026 11:45:00 +0000

Type Values Removed Values Added
Title Sandbox Escape via Entitlement Validation in macOS
Weaknesses CWE-280

Tue, 15 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
Title Sandbox Escape via Entitlement Validation in macOS
Weaknesses CWE-280

Tue, 15 Sep 2026 01:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-17T17:00:35.316Z

Reserved: 2026-07-22T00:46:31.442Z

Link: CVE-2026-65381

cve-icon Vulnrichment

Updated: 2026-09-17T17:00:22.395Z

cve-icon NVD

Status : Modified

Published: 2026-09-14T21:17:22.460

Modified: 2026-09-17T17:16:45.750

Link: CVE-2026-65381

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T20:30:05Z

Weaknesses