CVE-2026-65356
Analyzed Analyzed - Analysis Complete

Improper Access Controls in macOS Golden Gate

Vulnerability report for CVE-2026-65356, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-20

Last updated on: 2026-11-03

Assigner: Apple Inc.

Description

An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-11-03
Generated
2026-11-09
AI Q&A
2026-10-20
EPSS Evaluated
2026-11-07
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
apple macos to 15.8 (exc)
apple macos From 26.0 (inc) to 26.7 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an access issue caused by insufficient access controls in macOS. It allows an app to potentially access sensitive user data. The issue was fixed in specific macOS versions: Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.

Detection Guidance

Detection methods for this vulnerability are not explicitly provided in the available resources. The CVE describes an access issue fixed in specific macOS versions, but no detection commands or tools are mentioned. Reviewing Apple's security updates and checking system logs for unauthorized data access may help.

Impact Analysis

This vulnerability could allow malicious apps to access your private data without permission. If exploited, it may lead to unauthorized access to sensitive information stored on your device.

Compliance Impact

The provided CVE data does not specify how this vulnerability affects compliance with standards like GDPR or HIPAA. The description only mentions an access issue with improved controls but lacks details on data exposure or regulatory impacts.

Mitigation Strategies

Update to the latest version of macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 to address the access control issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65356. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...