CVE-2026-86933

Analyzed Analyzed - Analysis Complete

macOS Golden Gate Contact Information Access Issue

Publication date: 2026-10-20

Last updated on: 2026-10-29

Assigner: Apple Inc.

Description

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-29

Generated

2026-11-09

AI Q&A

2026-10-20

EPSS Evaluated

2026-11-07

NVD

CVE-2026-86933

EUVD

EUVD-2026-104724

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 27.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is a permissions issue in macOS Golden Gate 27 where an app could potentially access a user's contact information due to insufficient sandbox restrictions.

Detection Guidance

The provided CVE details do not include specific detection methods or commands for identifying this vulnerability on a system or network. The issue involves a permissions problem with sandbox restrictions in macOS Golden Gate 27, allowing potential access to user contacts.

Impact Analysis

An attacker could exploit this to steal sensitive contact details, leading to privacy breaches or identity theft if the app is malicious.

Compliance Impact

This could violate GDPR's data protection principles by unauthorized access to personal data and HIPAA's safeguards for protected health information if contacts include such data.

Mitigation Strategies

Update to macOS Golden Gate 27 or later to apply the fixed sandbox restrictions addressing the permissions issue.

Hi! I’m here to help you understand CVE-2026-86933. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...