Aller au contenu
en Se connecter
9.8 Critique Exploitée

CVE-2026-65400 Apple macOS Improper Authentication Vulnerability

Exploitation active constatée

· catalogue CISA KEV
Action attendue Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Campagnes de rançongiciel Non constatée à ce jour
Faiblesse CWE-287

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

Produits et versions touchés

Produit Versions touchées Corrigé en
macOS 27 premières → < 27 27
macOS 26.7 premières → < 26.7 26.7
macOS 26.6 premières → < 26.6.1 26.6.1
macOS 15.7 premières → < 15.7.9 15.7.9
macOS 14.8 premières → < 14.8.9 14.8.9

Références

Chronologie

  1. Publiée
  2. Ajoutée au catalogue KEV
  3. Dernière modification

Autres CVE de macOS

Les 3813 CVE de macOS →
CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Moyenne CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 Élevée CVE-2026-113945 An out-of-bounds read was addressed with improved bounds checking 5.5 Moyenne CVE-2026-65327 A logic issue was addressed with improved checks 8.4 Élevée
Suivre cette CVE