CVE-2026-65379: Security vulnerability

Published Oct 20, 2026

Updated

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade macOS to a version that resolves this vulnerability.
Fixed in 27
Upgrade
Upgrade macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.8
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.7

Event History

Oct 20, 2026

CVE Published

via MITRE·12:50 AM

Data Sourced

via MITRE·12:50 AM

DescriptionWeakness

Data Sourced

via NVD·01:17 AM

Description

Frequently Asked Questions

Which systems have a fix available for this issue?

Apple lists fixes in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

What is known about exploitation requirements?

The available information states that an app may be able to access sensitive user data. It does not specify required permissions, user interaction, attack vector, or whether default configurations are affected.

What can be done if the update cannot be installed immediately?

The provided information does not list a workaround or mitigation. Limit installation and use of untrusted applications until the relevant macOS update can be applied.