{"id":"CVE-2026-86939","aliases":["EUVD-2026-110187","GHSA-xhf7-gfqv-pw29"],"status":"published","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00383,"percentile":0.32786,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2026-10-26T20:41:21Z","modified":"2026-11-03T16:29:50Z","products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/149521","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/149522","tags":["Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86939"},{"url":"https://github.com/advisories/GHSA-xhf7-gfqv-pw29"}],"sources":{"cve":[{"id":"CVE-2026-86939","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data.","status":"published","published":"2026-10-26T20:41:21.512Z","modified":"2026-11-03T14:37:57.384Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-862"],"updated_at":"2026-11-03T15:57:15.749386Z"}],"euvd":[{"id":"EUVD-2026-110187","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data.","status":"published","published":"2026-10-26T20:41:21Z","modified":"2026-11-03T14:37:57Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T16:18:15.107036Z"}],"ghsa":[{"id":"GHSA-xhf7-gfqv-pw29","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data.","status":"published","published":"2026-10-26T21:36:28Z","modified":"2026-11-03T15:32:40Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-03T15:57:23.404697Z"}],"nvd":[{"id":"CVE-2026-86939","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data.","status":"published","published":"2026-10-26T21:20:31.42Z","modified":"2026-11-03T16:29:50.94Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-03T18:16:46.276143Z"}]}}