{"id":"CVE-2026-86907","title":"An authorization issue was addressed with improved entitlement checks","summary":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.","severity":"none","vendor":"Apple","product":"macOS","affected":["macOS < 15.8","macOS < 26.7"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T00:50:48.689Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86907","references":[{"url":"https://support.apple.com/en-us/149042"},{"url":"https://support.apple.com/en-us/149043"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T01:49:42.595Z","slug":"CVE-2026-86907","body":"## Overview\n\nAn authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.\n\n## Affected\n\n- `macOS < 15.8`\n- `macOS < 26.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}