Apple Macos: access control flaw

At a glance

Apple Macos: Red, act today. An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

The flaws

• CVE-2026-112467: Access control flaw (CVSS 3.3 · EPSS 0%)
• CVE-2026-65400: Apple macOS Improper Authentication Vulnerability (CVSS 9.8 · exploited)
• CVE-2026-112526: Buffer overflow (CVSS 9.8 · EPSS 1%)
• CVE-2026-112443: Memory corruption (CVSS 9.1 · EPSS 1%)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Apple Macos

Where it stands

• Exploited in the wild
• On CISA's exploited list since 18 Aug
• US federal deadline 21 Aug
• 1 outlet covering it

How it unfolded

1. 18 Aug, CISA (official): Added to the Known Exploited Vulnerabilities list
2. 21 Aug, Deadline (official): US federal agencies must have patched
3. 26 Oct, SANS Internet Storm Center (press): Apple Patches for October 2026, (Mon, Oct 26th)

Connects to

• Same weakness: Access control flaw (CWE-284). 400 other warnings in 30 days
• Same product: Earlier Apple Macos warnings. 155 in the last 90 days
• Reported alongside: Apple Ipados: access control flaw. CVE-2026-86990 · in 1 of the same article