CVE-2026-65400

CRITICAL

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

CVSS v3.1 Score

9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 8/6/2026Modified: 8/19/2026

Related Intelligence (2)

HIGHVulnerability

CISA KEV: Apple macOS — Apple macOS Improper Authentication Vulnerability

Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials.

CVE-2026-65400Apple macOS
CISA KEV
CRITICALVulnerability

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned. The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impacting the Screen Sharing component that could allow an attacker already on the network to

CVE-2026-65400
The Hacker News

References (7)

https://support.apple.com/en-us/148170Release NotesVendor Advisoryhttps://support.apple.com/en-us/148171Release NotesVendor Advisoryhttps://support.apple.com/en-us/148172Release NotesVendor Advisoryhttp://seclists.org/fulldisclosure/2026/Aug/36Mailing Listhttp://seclists.org/fulldisclosure/2026/Aug/37Broken Linkhttps://advisories.ncsc.nl/2026/ncsc-2026-0280.htmlThird Party Advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400US Government Resource