CVE-2026-64745
published 2026-07-27CVE-2026-64745: This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical…
PriorityP48low2.4CVSS 3.1
AVPACLPRNUINSUCLINAN
EPSS
0.14%
3.5th percentile
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 15.7.8 | 15.7.8 |
| apple | macos | < 26.6 | 26.6 |
| apple | macos | >= 15.0 < 15.7.8 | 15.7.8 |
| apple | macos | >= 26.0 < 26.6 | 26.6 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple macOS up to 15.7.7/26.5 Lock Screen privileges management
vuldb·2026-07-28
CVE-2026-64745 [LOW] Apple macOS up to 15.7.7/26.5 Lock Screen privileges management
A vulnerability described as problematic has been identified in Apple macOS up to 15.7.7/26.5. This vulnerability affects unknown code of the component Lock Screen. Such manipulation leads to improper privilege management.
This vulnerability is listed as CVE-2026-64745. The attack must be carried out locally. There is no available exploit.
Upgrading the affected component is recommended.
GHSA
This issue was addressed with additional restrictions on the lock screen.
ghsa_unreviewed·2026-07-27
CVE-2026-64745 [LOW] CWE-287 This issue was addressed with additional restrictions on the lock screen.
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos.
No detection rules found.
No public exploits indexed.
2026-07-27
Published