Description
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.
Published: 2026-10-20
Score: 4.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unexpected System Termination
Action: Patch
AI Analysis

Impact

A race condition exists in macOS caused by inadequate locking. If resolved by improved synchronization, an application can trigger the operating system to terminate unexpectedly. The vulnerability allows a local app to manipulate process scheduling or shared resources to break the normal shutdown sequence, resulting in a crash that may expose volatile data or disrupt critical services.

Affected Systems

Apple macOS releases prior to Golden Gate 27 are affected. This includes all macOS builds that precede version 27, which used the older concurrency mechanisms that the patch later addressed.

Risk and Exploitability

The CVSS score is 4.7 and the EPSS score is less than 1%; the vulnerability is not listed in the CISA KEV catalog. Because the flaw requires a local application to execute code that targets the race condition, the attack vector is inferred to be local. The modest CVSS score reflects limited remote impact, but the potential for forcing an entire system to shut down indicates a moderate impact if exploited.

Generated by OpenCVE AI on October 20, 2026 at 18:23 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update macOS to Golden Gate 27 or later to receive the improved locking fix
  • Ensure all system security updates are installed after upgrading to mitigate related issues
  • Limit the execution of unknown or untrusted applications until the update is applied to reduce the chance of triggering the race condition

Generated by OpenCVE AI on October 20, 2026 at 18:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://support.apple.com/en-us/149035 cve-icon cve-icon
History

Thu, 29 Oct 2026 18:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Tue, 20 Oct 2026 18:45:00 +0000

Type Values Removed Values Added
Title Race Condition Enabling Application to Trigger Unexpected System Termination

Tue, 20 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Title Race Condition Enabling Application to Trigger Unexpected System Termination
Weaknesses CWE-362

Tue, 20 Oct 2026 04:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Tue, 20 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
Description A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-10-26T20:41:05.461Z

Reserved: 2026-09-08T16:43:41.876Z

Link: CVE-2026-86915

cve-icon Vulnrichment

Updated: 2026-10-20T14:06:06.819Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-20T01:17:27.100

Modified: 2026-10-29T18:34:12.710

Link: CVE-2026-86915

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T18:30:16Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')