CVE-2026-64712

An improper access control flaw (CWE-284) in macOS allows an application running on an affected Mac to gain root privileges, meaning full compromise of the system's confidentiality, integrity, and availability. The flaw is triggered by a locally running app abusing insufficient checks in an OS component — no user interaction is needed, and the attacker only needs code already executing on the machine. All Macs running macOS Sequoia prior to 15.8, macOS Tahoe prior to 26.7, and macOS Golden Gate prior to 27 are affected. Apple addressed the issue with improved checks in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27. No public proof-of-concept exists and there is no known exploitation in the wild.

What to do: Update to macOS Sequoia 15.8, macOS Tahoe 26.7, or macOS Golden Gate 27 as soon as possible. Because exploitation requires malicious code already running on the Mac, restrict software installation to trusted sources (App Store or notarized apps) and review recently installed or sideloaded third-party applications for signs of misuse.