VULNERABILITY INTELLIGENCE

CVE-2026-39871

CVSS score7.5 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-05-11
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to observe unprotected user data.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-552

Primary references