Improper access control in macOS - CVE-2026-64745
Published: August 17, 2026
Vulnerability identifier: #VU143774
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64745
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker with physical access to disclose sensitive information.
The vulnerability exists due to improper access control in Siri when handling local access to the system. An attacker with physical access can access the device to disclose sensitive information.
Affected software
macOS
How to mitigate CVE-2026-64745
Install update from vendor's website.
macOS - addressed in versions 26.6 25G72, 15.7.8 24G824