GCVE-1988-2026-0300
Vulnerability from gna-1988 – Published: 2026-09-08 11:40 – Updated: 2026-09-09 10:09
VLAI
EPSS
VEX
Title
APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9
macOS Sequoia 15.7.9 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/148171.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Screen Sharing
Available for: macOS Sequoia
Impact: An attacker on the network may be able to authenticate to Screen
Sharing without valid credentials
Description: An authentication issue was addressed with improved state
management.
CVE-2026-65400: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)
macOS Sequoia 15.7.9 may be obtained from the Mac App Store or Apple's
Software Downloads web site: https://support.apple.com/downloads/
All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----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=6Ozt
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Apple | APPLE-SA-08-06-2026-2 macOS Sequoia |
Affected:
unknown
|
guessed |
Relationships
reference
GCVE-1988-2026-0300 (this record)
- related CVE-2026-65400
{
"containers": {
"cna": {
"affected": [
{
"product": "APPLE-SA-08-06-2026-2 macOS Sequoia",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9\n\nmacOS Sequoia 15.7.9 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/148171.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nScreen Sharing\nAvailable for: macOS Sequoia\nImpact: An attacker on the network may be able to authenticate to Screen\nSharing without valid credentials\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-65400: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)\n\nmacOS Sequoia 15.7.9 may be obtained from the Mac App Store or Apple\u0027s\nSoftware Downloads web site: https://support.apple.com/downloads/\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\n1dIV5ILTaIow0TeBFb6n9iC3SxvGvQQArtcIQkxO+LEBwakKj5M=\n=6Ozt\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T10:09:47Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/37"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Aug/37"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/downloads/"
},
{
"url": "https://support.apple.com/en-us/148171"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Aug/37"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2026-65400",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0300",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/37",
"automated": true,
"contentSha256": "26acdac926213e8f1719d54af58285bc35919794c339c3c79e698b1907bf4547",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Aug/37",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-08-06T21:40:26Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0300"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-08T11:40:48Z",
"dateUpdated": "2026-09-09T10:09:47Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0300"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…