CVE-2026-65356: Apple macOS Golden Gate vulnerability

Q: Which systems need the security update?

Systems running affected macOS releases should update to macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7, as applicable. These releases contain the access-control fix.

Q: What access does an attacker need to exploit this issue?

The available information states that an app may be able to access sensitive user data. It does not specify whether the app requires prior installation, user interaction, or particular permissions.

Published Oct 20, 2026

Updated

An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

Affected Software

3 affected components

Apple macOS Golden Gate<27

Apple macOS Sequoia<15.8

Apple macOS Tahoe<26.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade macOS Golden Gate to a version that resolves this vulnerability.
Fixed in 27
Upgrade
Upgrade macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.8
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.7

Event History

Oct 20, 2026

CVE Published

via MITRE·12:50 AM

Data Sourced

via MITRE·12:50 AM

DescriptionWeakness

Data Sourced

via NVD·01:17 AM

Description

Frequently Asked Questions

Which systems need the security update?

Systems running affected macOS releases should update to macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7, as applicable. These releases contain the access-control fix.

What access does an attacker need to exploit this issue?

The available information states that an app may be able to access sensitive user data. It does not specify whether the app requires prior installation, user interaction, or particular permissions.