A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15…

Critical CVSS 10.0

CVECVE-2026-65381

First seen2026-09-17 18:15 UTC

Disclosed2026-09-14 21:17 UTC

Last updated2026-09-17 18:15 UTC

Channel statusauto

Summary

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://support.apple.com/en-us/149035 Release Notes
https://support.apple.com/en-us/149042 Release Notes
https://support.apple.com/en-us/149043 Release Notes

Timeline

2026-09-17 nvd_ingest NVD