CVE-2026-65372: Race Condition

Published Oct 20, 2026

Updated

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade macOS Golden Gate to a version that resolves this vulnerability.
Fixed in 27
Upgrade
Upgrade macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.8
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.7

Event History

Oct 20, 2026

CVE Published

via MITRE·12:50 AM

Data Sourced

via MITRE·12:50 AM

DescriptionWeakness

Data Sourced

via NVD·01:17 AM

Description

Frequently Asked Questions

What must an attacker do to exploit this issue?

The attacker must be able to run a malicious application on the affected Mac. The issue may allow that application to bypass Privacy preferences.

Which systems have the fix available?

The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.