Information disclosure in macOS - CVE-2026-86931
Published: October 27, 2026
Vulnerability identifier: #VU158026
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-86931
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to insufficient protection of sensitive information in the Security component of Apple macOS when handling access from local applications. A local user can run a local application to gain access to sensitive information.
Affected software
macOS
How to mitigate CVE-2026-86931
Install update from vendor's website.
macOS - addressed in versions 26.7.2 25G332, 15.8.2 24H232