CVE-2026-65401

Race Condition Causing Unexpected System Termination in macOS

View on CVE.org
Published Sep 14, 2026 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

Analysis

AI-generated

Technical impact

A race condition in macOS state handling allows an application to trigger an unexpected system termination. The flaw does not provide remote code execution or data disclosure. Its primary impact is a denial‑of‑service by crashing the operating system, resulting in loss of availability.

Affected Systems

Apple macOS is affected. Users running any release earlier than macOS Golden Gate 27 or macOS Tahoe 26.7 remain vulnerable. The fix is incorporated in those two releases and in subsequent updates.

Risk and Exploitability

The CVSS score of 5.5 indicates medium severity. The EPSS score is below 1%, showing a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog and no active exploits have been reported. The likely attack vector is local, requiring an application to trigger the race condition, typically by running with elevated privileges.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade macOS to version 27 (Golden Gate) or 26.7 (Tahoe) or later to eliminate the race condition.
  • Monitor system logs for unexpected termination events such as kernel panics that may indicate the race condition is still active.
  • Limit the execution applications that could trigger the race condition until the operating system is patched.

Generated by OpenCVE AI on September 20, 2026 at 19:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Race Condition Causing Unexpected System Termination in macOS
Type Values Removed Values Added
Title Race Condition Leading to Unexpected System Termination in macOS
Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Title Race Condition Leading to Unexpected System Termination in macOS
Weaknesses CWE-362
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos
Type Values Removed Values Added
Description A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
References
Earlier changes (2)
Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Oct 26, 2026, 8:38 PM
Reserved
Jul 22, 2026, 12:46 AM

View source JSON

Updated
Sep 15, 2026, 3:34 PM

JSON

Status
Analyzed
Published
Sep 14, 2026, 9:17 PM
Modified
Sep 16, 2026, 1:09 AM

View source JSON

No data.

Updated
Sep 20, 2026, 8:00 PM

JSON