VULNERABILITY INTELLIGENCE

CVE-2026-64790

CVSS score7.8 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-09-14
Last modified2026-09-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references