medium · CVSS v3 4.7 · EPSS 0.00208

CVE-2026-65372

A race condition in macOS privacy preference handling allows a malicious application to bypass privacy settings. The flaw was fixed in recen

Overview

A race condition in macOS privacy preference handling allows a malicious application to bypass privacy settings. The flaw was fixed in recent macOS releases. Defenders should ensure systems are updated.

Description

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.

Impact

Confidentiality: privacy settings can be overridden, Integrity: applications may gain elevated permissions, Availability: not directly affected. Affected parties include macOS users and administrators.

Remediation

Update to macOS Golden Gate 27, Sequoia 15.8, or Tahoe 26.7. Verify system integrity, enforce least privilege, and monitor for abnormal privacy preference changes.

Risk context

Medium severity with an EPSS of 0.00208 indicates a low likelihood of exploitation, but patching promptly is recommended.

Affected products

  • Apple macOS Golden Gate
  • Apple macOS Sequoia
  • Apple macOS Tahoe

Scores

Severity
medium
CVSS v2
3.8
CVSS v3
4.7
CVSS v4
—
EPSS
0.00208

macOS privacy race condition update defense CVE-2026-65372

← All CVEs

Related CVEs

medium

CVE-2026-96902

The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing unauthenticated users to read details a site has chosen to hide on published listings, such as the asking price, sold price, street address and exact map coordinates.

View analysis

medium

CVE-2026-8355

IBM ContextForge MCP Gateway contains a Server-Side Request Forgery (SSRF) vulnerability in the OAuth configuration handling. Authenticated users with gateway creation privileges can force the server to send HTTP POST requests to internal network resources or cloud metadata endpoints. This allows for potential data exfiltration and internal network reconnaissance.

View analysis

medium

CVE-2026-109441

LangAlpha versions through 2026.09.07 suffer from an improper isolation flaw where tenant sandbox containers share a default Docker bridge network. This configuration allows authenticated users to bypass workspace ownership checks and access other tenants' containers, potentially exposing sensitive data like vault secrets.

View analysis

medium

CVE-2026-28850

An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data.

View analysis