A recently disclosed vulnerability (CVE-2026-65400) affects Apple macOS Screen Sharing and may allow a remote attacker on the network to authenticate without valid credentials, potentially gaining unauthorized access to affected systems.
Severity level:
CVSS Score: 9.8/Critical.
Description:
CVE-2026-65400 is a critical authentication bypass vulnerability in the macOS Screen Sharing component. Due to improper state management during authentication, a network-based attacker may be able to establish a Screen Sharing session without valid credentials. Successful exploitation could allow unauthorized access to affected macOS systems and remote control of exposed devices.
Affected Versions:
- macOS Sonoma versions prior to 14.8.9.
- macOS Sequoia versions prior to 15.7.9.
- macOS Tahoe versions prior to 26.6.1.
Impact:
Successful exploitation may allow attackers to gain unauthorized remote access to affected macOS systems.
Resolution:
Upgrade affected systems to:-
- macOS Sonoma version 14.8.9 or later.
- macOS Sequoia version 15.7.9 or later.
- macOS Tahoe version 26.6.1 or later.
Mitigations:
- Disable Screen Sharing on systems where it is not required.
- Limit Screen Sharing access to trusted IP addresses and administrative networks.
- Monitor systems for unauthorized remote access attempts and unusual account activity.
- Review internet-facing macOS systems to ensure Screen Sharing is not unnecessarily exposed.
Reference:
UIT Information Security