Executive brief
A race condition vulnerability in Apple macOS allows local users to read sensitive kernel memory. An attacker with local access to a system could exploit this timing-based flaw to bypass memory protection mechanisms and access protected kernel data, potentially leading to privilege escalation or leakage of cryptographic keys and other sensitive information.
Technical details
This vulnerability is a race condition affecting the macOS kernel, where concurrent access to kernel memory is not properly serialized. The root cause involves insufficient locking mechanisms in a kernel subsystem, allowing a local attacker to exploit the timing window to read kernel memory that should be protected. The attack requires local access to the affected system. The vulnerability is addressed through improved locking in the kernel, preventing the race condition. Patches are available in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
- Apple macOS Golden Gate 27
- Apple macOS Sequoia 15.8
- Apple macOS Tahoe 26.7
Timeline
- 2026-09-14: disclosed: Published on NVD
- 2026-09-14: patched: Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7