Detections
Analytics

CVE-2026-65400

critical

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

References

https://advisories.ncsc.nl/2026/ncsc-2026-0280.html

https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-microsoft-vmware-apple-vulnerabilities/

https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html

https://securityaffairs.com/197490/hacking/u-s-cisa-adds-apple-macos-microsoft-sharepoint-broadcom-vmware-vcenter-and-microsoft-ike-flaws-to-its-known-exploited-vulnerabilities-catalog.html

https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog

https://www.malwarebytes.com/blog/bugs/2026/08/update-your-mac-screen-sharing-vulnerability-exploited-in-the-wild

https://www.helpnetsecurity.com/2026/08/17/apple-macos-screen-sharing-flaw/

https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html

https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html

https://www.bleepingcomputer.com/news/security/hackers-exploit-macos-screen-sharing-flaw-to-deploy-monero-miner/

https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/

https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/

https://github.com/acheong08/CVE-2026-65400

https://github.com/panchocosil/CVE-2026-65400-poc

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400

https://support.apple.com/en-us/149042

https://support.apple.com/en-us/149035

https://support.apple.com/en-us/148172

https://support.apple.com/en-us/148171

https://support.apple.com/en-us/148170

http://seclists.org/fulldisclosure/2026/Aug/36

Details

Source: Mitre, NVD

Published: 2026-08-06

Updated: 2026-09-15

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:P/A:N

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00304

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability of Interest