An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Privacy preferences.
History

Fri, 06 Nov 2026 02:45:00 +0000

Type Values Removed Values Added
Title macOS Privacy Preference Bypass via Authorization Flaw

Fri, 06 Nov 2026 00:00:00 +0000

Type Values Removed Values Added
Title Privacy Preferences Bypass via Authorization Issue
Weaknesses CWE-285

Thu, 05 Nov 2026 21:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-863
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}


Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Title Privacy Preferences Bypass via Authorization Issue
First Time appeared Apple
Apple macos
Weaknesses CWE-285
Vendors & Products Apple
Apple macos

Mon, 26 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Privacy preferences.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-10-26T20:40:11.670Z

Updated: 2026-10-26T20:40:11.670Z

Reserved: 2026-10-19T17:05:21.835Z

Link: CVE-2026-112447

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-10-26T21:17:34.657

Modified: 2026-11-05T20:42:53.213

Link: CVE-2026-112447

cve-icon Redhat

No data.