Skip to content
Sign in
5.5 Medium

CVE-2026-64789 This issue was addressed with improved validation of file attributes

Description

This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may bypass Gatekeeper checks.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Local
Attack complexity
Low
Privileges required
None
Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Affected products and versions

Product Affected versions Fixed in
macOS 27 earliest → < 27 27
macOS 26.7 earliest → < 26.7.2 26.7.2
macOS 15.8 earliest → < 15.8.2 15.8.2

Other CVEs of macOS

The 3813 CVEs of macOS →
CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-113945 An out-of-bounds read was addressed with improved bounds checking 5.5 Medium CVE-2026-65327 A logic issue was addressed with improved checks 8.4 High
Track this CVE