Critical Alert 4 Active Exploits Detected Today

CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability →
CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability →
CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability →
CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability →
Powered by CVE Watchtower
×
August 18, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-65400NVD

Vulnerability Summary

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.
Severity Level
CRITICAL(9.8)
Published Date
Aug 6, 2026
Last Modified
Aug 18, 2026
Exploitation Status
ACTIVE
EPSS Score (30-Day)
0.50%Probability
Root Weakness (CWE)
CWE-287: Improper Authentication ↗
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References