CVE-2026-113948 Details
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2. An app may be able to modify protected parts of the file system.
A permissions vulnerability has been identified in the Directory Utility and PackageKit components of Apple macOS Golden Gate. This issue allows applications to modify protected areas of the file system. The vulnerability arises from inadequate permissions checks, which could be exploited by malicious apps to access or alter sensitive system files.
Users can update to macOS Golden Gate 27.2, where this vulnerability has been addressed. Instructions for updating can be found on the Apple Support website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.apple.com/en-us/149521 | [email protected] | Release NotesVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-732 | Incorrect Permission Assignment for Critical Resource | [email protected] |
| CWE-732 | Incorrect Permission Assignment for Critical Resource | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| apple macos | < 27.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 4, 2026 | CVE Modified | CISA-ADP |
| Nov 3, 2026 | Initial Analysis | [email protected] |
| Oct 26, 2026 | New CVE Received | [email protected] |