CVE-2026-65399

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-65399
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/149034 Vendor Advisory
https://support.apple.com/en-us/149035 Vendor Advisory
https://support.apple.com/en-us/149037 Vendor Advisory
https://support.apple.com/en-us/149038 Vendor Advisory
https://support.apple.com/en-us/149041 Vendor Advisory
https://support.apple.com/en-us/149042 Vendor Advisory
https://support.apple.com/en-us/149043 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
History

18 Sep 2026, 17:33

Type Values Removed Values Added
First Time Apple watchos
Apple ipados
Apple
Apple macos
Apple visionos
Apple iphone Os
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/149034 - () https://support.apple.com/en-us/149034 - Vendor Advisory
References () https://support.apple.com/en-us/149035 - () https://support.apple.com/en-us/149035 - Vendor Advisory
References () https://support.apple.com/en-us/149037 - () https://support.apple.com/en-us/149037 - Vendor Advisory
References () https://support.apple.com/en-us/149038 - () https://support.apple.com/en-us/149038 - Vendor Advisory
References () https://support.apple.com/en-us/149041 - () https://support.apple.com/en-us/149041 - Vendor Advisory
References () https://support.apple.com/en-us/149042 - () https://support.apple.com/en-us/149042 - Vendor Advisory
References () https://support.apple.com/en-us/149043 - () https://support.apple.com/en-us/149043 - Vendor Advisory

17 Sep 2026, 17:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.4
CWE CWE-290
Information

Published : 2026-09-14 21:17

Updated : 2026-09-18 17:33

NVD link : CVE-2026-65399

Mitre link : CVE-2026-65399

CVE.ORG link : CVE-2026-65399

JSON object : View

Products Affected

apple

  • macos
  • iphone_os
  • watchos
  • ipados
  • visionos
CWE
CWE-290

Authentication Bypass by Spoofing