VulnSocial

CVE-2026-65381Patch(apple / macos)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apple macos systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.

apple CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • macos

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • Peaked 2d ago at 1 mentions (2026-09-17); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
apple
Products
macos

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-09-17: 1Mentions · 2026-09-18: 1Mentions · 2026-09-20: 1Patch / Workaround · 2026-09-17: 1Patch / Workaround · 2026-09-18: 1Patch / Workaround · 2026-09-20: 1Technical Details · 2026-09-17: 1Technical Details · 2026-09-18: 1Technical Details · 2026-09-20: 109-1709-1809-20
Signal classification1 categories
Patch
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • Ryx@PadhiyarRushi
    Patch

    Sequoia 15.8 fixed multiple sandbox escapes and root paths: • CVE-2026-65381 – entitlement validation → sandbox breakout • CVE-2026-84535 – Automator sandbox escape • CVE-2026-65362 / 84505 / 43786 / 86917 – various “app may gain root” issues Local privilege escalation surface is still very much alive on macOS. https://support.apple.com/en-us/149043 #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #macOS #PrivilegeEscalation

    Post summary

    The post reports that macOS Sequoia 15.8 patched multiple local privilege escalation and sandbox escape CVEs, with an Apple advisory link. No PoC, exploit tool, or active exploitation is mentioned.

    01064635
    954 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    🍎 CVE-2026-65381: CVSS 10 in Apple macOS. Entitlement verification bypass, no auth required, full system compromise possible. Fixed in macOS Golden Gate 27 & Sequoia 15. Update now. #cybersecurity #ciso #cto #Apple #macOS #vulnerabilities #mssp https://secalerts.co/vulnerability/CVE-2026-65381?utm_campaign=x https://t.co/op6Rstpaif

    Post summary

    The tweet discloses CVE-2026-65381, a CVSS 10 entitlement verification bypass in macOS, and notes that fixes are available in macOS Golden Gate 27 and Sequoia 15, urging users to update.

    00010202
    889 followersView on X
  • takenaka hiroya@Joe_Biden_ja
    Patch

    macOS の CVE-2026-65381 はアプリがサンドボックスを抜けられる欠陥で、CVSS は 10.0。修正版は macOS 15.8 と 26.7 です。該当するかの確認方法、パッチ前の緩和策、侵害の検知まで対処の順にまとめました。 https://ai-news.autoarticles.net/article/post_1789608148623_rd7tur

    Post summary

    Post announces macOS CVE-2026-65381 (sandbox escape, CVSS 10.0) and focuses on remediation: fixed versions (macOS 15.8/26.7), pre-patch mitigation, and compromise detection.

    0000061
    556 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---

Explore more

Back to dashboardapple CVEsmacos vulnerabilities