CVE-2026-65379

Analyzed Analyzed - Analysis Complete

Improved Input Handling Fixes Data Exposure in macOS

Publication date: 2026-10-20

Last updated on: 2026-11-03

Assigner: Apple Inc.

Description

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-03

Generated

2026-11-09

AI Q&A

2026-10-20

EPSS Evaluated

2026-11-07

NVD

CVE-2026-65379

EUVD

EUVD-2026-104701

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 15.8 (exc)
apple	macos	From 26.0 (inc) to 26.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability involves an issue where an app could potentially access sensitive user data due to improper handling of secure input state. It was addressed by improving how secure input state is managed in the affected macOS versions.

Detection Guidance

The provided CVE data does not include specific detection methods or commands for identifying this vulnerability on a system. The issue involves improved handling of secure input state in macOS versions, but no technical indicators or detection steps are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an app to access sensitive user data, potentially compromising personal information such as passwords, messages, or other confidential data stored on the device.

Compliance Impact

The vulnerability allows an app to access sensitive user data, which could lead to unauthorized data exposure. This may violate GDPR principles of data protection and user consent, as well as HIPAA requirements for safeguarding protected health information if such data is involved.

Mitigation Strategies

Update to macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 or later to address the issue.

Hi! I’m here to help you understand CVE-2026-65379. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...