CVE-2026-65393
published 2026-09-14CVE-2026-65393: A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive…
PriorityP424medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
0.16%
4.4th percentile
A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 27 | 27 |
| apple | macos | < 27.0 | 27.0 |
| apple | xcode | < 27 | 27 |
| apple | xcode | < 27.0 | 27.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple Xcode/macOS up to 26 permission
vuldb·2026-09-20·CVSS 5.5
CVE-2026-65393 [MEDIUM] Apple Xcode/macOS up to 26 permission
A vulnerability was found in Apple Xcode and macOS up to 26. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to permission issues.
This vulnerability is referenced as CVE-2026-65393. The attack can only be performed from a local environment. No exploit is available.
Upgrading the affected component is advised.
GHSA
A permissions issue was addressed with improved validation.
ghsa_unreviewed·2026-09-14
CVE-2026-65393 [MEDIUM] CWE-863 A permissions issue was addressed with improved validation.
A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data.
No detection rules found.
No public exploits indexed.
2026-09-14
Published