CVE-2026-65400

critical

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

References

https://advisories.ncsc.nl/2026/ncsc-2026-0280.html

https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-microsoft-vmware-apple-vulnerabilities/

https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html

https://securityaffairs.com/197490/hacking/u-s-cisa-adds-apple-macos-microsoft-sharepoint-broadcom-vmware-vcenter-and-microsoft-ike-flaws-to-its-known-exploited-vulnerabilities-catalog.html

https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog

https://www.malwarebytes.com/blog/bugs/2026/08/update-your-mac-screen-sharing-vulnerability-exploited-in-the-wild

https://www.helpnetsecurity.com/2026/08/17/apple-macos-screen-sharing-flaw/

https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html

https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html

https://www.bleepingcomputer.com/news/security/hackers-exploit-macos-screen-sharing-flaw-to-deploy-monero-miner/

https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/

https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400

https://support.apple.com/en-us/148172

https://support.apple.com/en-us/148171

https://support.apple.com/en-us/148170

http://seclists.org/fulldisclosure/2026/Aug/36

Details

Source: Mitre, NVD

Published: 2026-08-06

Updated: 2026-08-19

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:P/A:N

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00304

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability of Interest

Detections

Analytics