Description
An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data.
Published: 2026-09-14
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Data Leakage
Action: Apply Patch
AI Analysis

Impact

The vulnerability is an authorization flaw in macOS that can allow an application to access sensitive user data it should not be able to read, which in turn can lead to unintended disclosure of private information. It is inferred from the description that the flaw originates from improper access control and therefore affects the confidentiality of user data. No explicit statement is provided about the extent of impact beyond data leakage.

Affected Systems

Apple macOS prior to macOS Golden Gate 27 and prior to macOS Sequoia 15.8 is affected.

Risk and Exploitability

The EPSS score of less than 1% indicates a low likelihood of exploitation, and the vulnerability is not listed in CISA's KEV catalog. The flaw involves improper access control, allowing any application running on the system to potentially read or exfiltrate sensitive data; it is inferred that this is a consequence of the authorization issue described. While the current exploitation probability remains low, it is inferred that local attackers could leverage this weakness to access private information, making timely patching and monitoring important.

Generated by OpenCVE AI on September 20, 2026 at 18:44 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update macOS to macOS Golden Gate 27, macOS Sequoia 15.8, or later to receive the access‑control fix issued by Apple.
  • Review the privacy permissions for all installed applications and revoke any unnecessary access to sensitive resources such as contacts, location, or files.
  • Enable system integrity protection and monitor system logs for suspicious activity that may indicate unauthorized access attempts.

Generated by OpenCVE AI on September 20, 2026 at 18:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Title macOS Authorization Issue Allowing Unauthorized Access to Sensitive User Data

Wed, 16 Sep 2026 18:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Wed, 16 Sep 2026 09:15:00 +0000

Type Values Removed Values Added
Title Authorization Vulnerability Enabling Unauthorized Access to User Data on macOS

Tue, 15 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 15 Sep 2026 09:30:00 +0000

Type Values Removed Values Added
Title Authorization Vulnerability Enabling Unauthorized Access to User Data on macOS
Weaknesses CWE-284

Tue, 15 Sep 2026 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-15T18:06:10.086Z

Reserved: 2026-09-01T21:13:17.753Z

Link: CVE-2026-84555

cve-icon Vulnrichment

Updated: 2026-09-15T18:06:05.319Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-14T21:17:31.657

Modified: 2026-09-16T18:00:46.377

Link: CVE-2026-84555

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T18:45:02Z

Weaknesses