CVE-2026-86940: Apple macOS Golden Gate vulnerability
Published Oct 20, 2026
·Updated
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.
Affected Software
1 affected component
Apple macOS Golden Gate<27
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
macOS Golden Gateto a version that resolves this vulnerability.Fixed in 27
Event History
Oct 20, 2026
CVE Published
via MITRE·12:50 AM
Data Sourced
via MITRE·12:50 AM
DescriptionWeakness
Data Sourced
via NVD·01:17 AM
Description
Frequently Asked Questions
1
What level of access would an attacker need to exploit this issue?
The issue is described as exploitable by an app, so exploitation requires the ability to run an application on the affected macOS system.
2
What is the potential impact?
An app may be able to disclose kernel memory, which could expose sensitive information held in kernel memory.
3
What is the remediation?
Update to macOS Golden Gate 27, where Apple states the vulnerable code was removed.