Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. The vulnerability, with a severity rating of 7.1 out of 10, stems from a bug in the macOS screen sharing capability, which allows a remote party to view the screen and control the keyboard and mouse while a machine is turned on. A flaw in the “state management,” which keeps track of preceding events, user interactions, variables, and other system states, is the underlying cause.
A video of the exploit in action can be found here. Details of CVE-2026-65400 became public at last week’s Black Hat security conference. Apple said last week that CVE-2026-65400 “may” allow an attacker without credentials to gain access to a Mac.
It’s unclear why Apple hedged, but softening language is common among most tech developers when disclosing vulnerabilities.
Extract — continue reading at the source.
