Apple macOS Sequoia
Moderate fix3 remedies
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*
Moderate fix3 remedies
- < 15.7.7
- < 14.8.7
- < 26.5
Apple macOS Symbolic Link Handling Race Condition Vulnerability Allowing Unauthorized Contacts Access
Vulnerability
Patched
A race condition vulnerability has been identified in the handling of symbolic links within the Sync Services component of macOS. This issue allows an application to access Contacts data without the user's consent. The vulnerability is present in multiple macOS versions, including Sequoia 15.7.6, Sonoma 14.8.6, and Tahoe 26.4.
Impact
Exploitation of this vulnerability could lead to unauthorized access to Contacts data.
Remediation
Users can update to macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, or macOS Tahoe 26.5 to address this vulnerability.
Added: May 11, 2026, 10:02 PM
Updated: May 11, 2026, 10:02 PM
Vulnerability Rating
Custom Algorithm
spread
8.4impact
0.6exploitability
3.8remediation
7.7relevance
8.0threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.