CVE-2026-65400

Опубликовано: 06 авг. 2026

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

Ссылки

https://support.apple.com/en-us/148170
Release Notes
Vendor Advisory
https://support.apple.com/en-us/148171
Release Notes
Vendor Advisory
https://support.apple.com/en-us/148172
Release Notes
Vendor Advisory
https://support.apple.com/en-us/149035
Release Notes
Vendor Advisory
https://support.apple.com/en-us/149042
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2026/Aug/36
Mailing List
http://seclists.org/fulldisclosure/2026/Aug/37
Broken Link
https://advisories.ncsc.nl/2026/ncsc-2026-0280.html
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.8.9 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 15.0 (включая) до 15.7.9 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.6.1 (исключая)

EPSS

Процентиль: 96%

0.10461

Средний

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

GHSA-cwph-f4w9-f4wq

CVSS3: 7.1

github

около 2 месяцев назад

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

BDU:2026-11878

CVSS3: 9.8

fstec

около 2 месяцев назад

Уязвимость службы Screen Sharing операционных систем Apple macOS, позволяющая нарушителю получить полный контроль над системой

EPSS

Процентиль: 96%

0.10461

Средний

9.8 Critical

CVSS3

Дефекты

CWE-287