{"id":"CVE-2026-65380","title":"An issue existed in the handling of snapshots","summary":"An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-863","CWE-284"],"vendor":"apple","product":"macos","affected":["macos < 27.0"],"patched":["macos 27.0"],"published":"2026-09-14","updated":"2026-09-16","sourceUpdated":"2026-09-16T17:18:53.630","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-65380","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com"}],"tags":["nvd","cve.org"],"epss":0.00167,"epssPercentile":0.06349,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-16T15:28:35.308644Z"},"ingestedAt":"2026-09-14T21:15:17.533Z","slug":"CVE-2026-65380","body":"## Overview\n\nAn issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.\n\n## Affected\n\n- `macos < 27.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `macos 27.0`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":205366,"id":"CVE-2026-65380","ts":1789574379088,"field":"cvss","old":null,"new":"5.5"},{"seq":205365,"id":"CVE-2026-65380","ts":1789574379088,"field":"severity","old":"none","new":"medium"}]}