CVE-2026-86940

Analyzed Analyzed - Analysis Complete

Memory Disclosure in macOS Golden Gate

Publication date: 2026-10-20

Last updated on: 2026-10-29

Assigner: Apple Inc.

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-29

Generated

2026-11-09

AI Q&A

2026-10-20

EPSS Evaluated

2026-11-07

NVD

CVE-2026-86940

EUVD

EUVD-2026-104726

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 27.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability involves an issue in macOS Golden Gate 27 where an app could potentially access and disclose kernel memory. The problem was resolved by removing the vulnerable code.

Detection Guidance

This vulnerability was addressed by removing the vulnerable code in macOS Golden Gate 27. No specific detection commands are provided in the available context. General monitoring for unusual kernel memory access or app behavior may be necessary.

Impact Analysis

An attacker could exploit this flaw to read sensitive kernel memory, potentially leading to unauthorized access to system data or privilege escalation.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves potential kernel memory disclosure in macOS, but no details are given about data exposure scope or regulatory implications.

Mitigation Strategies

Update to macOS Golden Gate 27 or later to remove the vulnerable code. Since the issue was addressed by removing the code, applying the latest security update is the primary mitigation step.

Hi! I’m here to help you understand CVE-2026-86940. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...