certfr_avis - certfr-2026-avi-0980

CERTFR-2026-AVI-0980

Vulnerability from certfr_avis

Une vulnérabilité a été découverte dans Apple macOS. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	macOS	macOS Tahoe versions antérieures à 26.6.1
Apple	macOS	macOS Sonoma versions antérieures à 14.8.9
Apple	macOS	macOS Sequoia versions antérieures à 15.7.9

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 148170	2026-08-06	vendor-advisory
Bulletin de sécurité Apple 148172	2026-08-06	vendor-advisory
Bulletin de sécurité Apple 148171	2026-08-06	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "macOS Tahoe versions ant\u00e9rieures \u00e0 26.6.1",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.8.9",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.7.9",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-65400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65400"
    }
  ],
  "initial_release_date": "2026-08-07T00:00:00",
  "last_revision_date": "2026-08-07T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0980",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-08-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apple macOS. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Apple macOS",
  "vendor_advisories": [
    {
      "published_at": "2026-08-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 148170",
      "url": "https://support.apple.com/en-us/148170"
    },
    {
      "published_at": "2026-08-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 148172",
      "url": "https://support.apple.com/en-us/148172"
    },
    {
      "published_at": "2026-08-06",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 148171",
      "url": "https://support.apple.com/en-us/148171"
    }
  ]
}

CVE-2026-65400 (GCVE-0-2026-65400)

Vulnerability from cvelistv5

Published

2026-08-06 18:17

Modified

2026-08-19 03:55

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

An attacker on the network may be able to authenticate to Screen Sharing without valid credentials

Summary

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

References

URL

Tags

	https://support.apple.com/en-us/148170
	https://support.apple.com/en-us/148171
	https://support.apple.com/en-us/148172

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: 0 < 14.8.9 Version: 0 < 15.7.9 Version: 0 < 26.6.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-65400",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-08-18",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-19T03:55:50.505Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://advisories.ncsc.nl/2026/ncsc-2026-0280.html"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-08-18T00:00:00.000Z",
            "value": "CVE-2026-65400 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-08-13T23:15:32.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2026/Aug/36"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2026/Aug/37"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15.7.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.6.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker on the network may be able to authenticate to Screen Sharing without valid credentials",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-06T18:17:18.263Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/148170"
        },
        {
          "url": "https://support.apple.com/en-us/148171"
        },
        {
          "url": "https://support.apple.com/en-us/148172"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-65400",
    "datePublished": "2026-08-06T18:17:18.263Z",
    "dateReserved": "2026-07-22T00:46:56.740Z",
    "dateUpdated": "2026-08-19T03:55:50.505Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTFR-2026-AVI-0980

Vulnerability from certfr_avis

Solutions

CVE-2026-65400 (GCVE-0-2026-65400)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature