Dashboard / CVE-2026-64708

CVE-2026-64708

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-07-27 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: None
I: High
A: None

Description

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may bypass Gatekeeper checks.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
apple macos 14.0 – 14.8.8
apple macos 15.0 – 15.7.8
apple macos 26.0 – 26.6

References & Advisories (3)

https://support.apple.com/en-us/128067
Release Notes Vendor Advisory
https://support.apple.com/en-us/128071
Release Notes Vendor Advisory
https://support.apple.com/en-us/128072
Release Notes Vendor Advisory

Bug Bounty Relevance

36 / 100
✓ No authentication
✓ Low complexity

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS — Exploitation Probability

0.17%
Raw Score 0.001670
Percentile 5.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00167
2026-10-28
0.00167

Intelligence Sources

nvd ref →

External Links