Improper access control in macOS - CVE-2026-86945
Published: October 27, 2026
Vulnerability identifier: #VU157889
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-86945
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to bypass access restrictions, potentially gaining unauthorized access to protected resources.
The vulnerability exists due to improper access control in the libcryptex component of Apple macOS when handling operations initiated by a local application. A local user can use a local application to attempt restricted operations, potentially gaining unauthorized access to protected resources.
Affected software
macOS
How to mitigate CVE-2026-86945
Install update from vendor's website.
macOS - addressed in versions 27.2 26B123, 15.8.2 24H232, 26.7.2 25G332