CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/148170	Release Notes Vendor Advisory
https://support.apple.com/en-us/148171	Release Notes Vendor Advisory
https://support.apple.com/en-us/148172	Release Notes Vendor Advisory
http://seclists.org/fulldisclosure/2026/Aug/36
http://seclists.org/fulldisclosure/2026/Aug/37

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

History

14 Aug 2026, 18:18

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.1~~	v2 : unknown v3 : 9.8

14 Aug 2026, 01:19

Type	Values Removed	Values Added
References		() http://seclists.org/fulldisclosure/2026/Aug/36 - () http://seclists.org/fulldisclosure/2026/Aug/37 -

07 Aug 2026, 17:22

Type	Values Removed	Values Added
First Time		Apple Apple macos
CPE		cpe:2.3:o:apple:macos::::::::
References	~~() https://support.apple.com/en-us/148170 -~~	() https://support.apple.com/en-us/148170 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/148171 -~~	() https://support.apple.com/en-us/148171 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/148172 -~~	() https://support.apple.com/en-us/148172 - Release Notes, Vendor Advisory

07 Aug 2026, 02:16

Type	Values Removed	Values Added
CWE		CWE-287
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.1

06 Aug 2026, 22:18

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-08-06 22:18

Updated : 2026-08-15 04:18

NVD link : CVE-2026-65400

Mitre link : CVE-2026-65400

CVE.ORG link : CVE-2026-65400

JSON object : View

Products Affected

apple

macos

CWE

CWE-287

Improper Authentication

{"id": "CVE-2026-65400", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-65400", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-14T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "macOS", "versions": [{"status": "affected", "version": "0", "lessThan": "14.8.9", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "15.7.9", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "26.6.1", "versionType": "custom"}]}]}], "published": "2026-08-06T22:18:14.533", "references": [{"url": "https://support.apple.com/en-us/148170", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/148171", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/148172", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://seclists.org/fulldisclosure/2026/Aug/36", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2026/Aug/37", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials."}], "lastModified": "2026-08-15T04:18:24.470", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "343D2ED2-0928-434D-9D9E-968A6365DDFE", "versionEndExcluding": "14.8.9", "versionStartIncluding": "14.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0FAFB32-637E-4BE3-8A5D-ABB145B1E28B", "versionEndExcluding": "15.7.9", "versionStartIncluding": "15.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31BB841D-2EFD-42A5-9387-685A27D3094E", "versionEndExcluding": "26.6.1", "versionStartIncluding": "26.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}