High Threat Security Alert (A26-08-10): Vulnerability in Apple Products

Description:

Apple has released a security update to address a vulnerability in Apple macOS. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerability.

Reports indicated that proof-of-concept (PoC) exploit code for a security restriction bypass vulnerability (CVE-2026-65400) is publicly available and it is at high risk of exploitation. System administrators are advised to take immediate action to patch your affected systems or follow the recommendations provided by the product vendors to mitigate the elevated risk of cyber attacks.

Affected Systems:

• macOS Sequoia prior to version 15.7.9
• macOS Sonoma prior to version 14.8.9
• macOS Tahoe prior to version 26.6.1

Impact:

Successful exploitation of the vulnerability could lead to security restriction bypass on an affected system.

Recommendation:

Patches for affected products are available. Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://support.apple.com/en-us/148170
• https://support.apple.com/en-us/148171
• https://support.apple.com/en-us/148172
• https://www.hkcert.org/security-bulletin/apple-macos-security-restriction-bypass-vulnerability_20260807
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65400