Apple has deployed emergency security updates for multiple macOS versions to correct a significant vulnerability within its Screen Sharing functionality. The updates, released on Thursday, August 7, 2026, address a flaw that could permit an attacker on the same local network to authenticate to Screen Sharing without valid credentials. This unscheduled release indicates that Apple's security teams considered the issue serious enough to bypass the typical software update cycle.
The vulnerability, identified as CVE-2026-65400, affects macOS Tahoe 26.6.1, macOS Sequoia 15.7.9, and macOS Sonoma 14.8.9. Apple's official security notes describe the problem as an authentication issue, stating that a nearby attacker "may be able to authenticate to Screen Sharing without valid credentials." This means the standard credential check for remote access to a Mac's desktop could be bypassed, potentially giving an intruder control over the machine.
Screen Sharing, built on the Virtual Network Computing (VNC) protocol, allows one Mac to view and control another remotely. This includes moving the mouse, typing, opening applications, and transferring files. The ability to bypass authentication for such a feature poses a substantial security risk, as it could grant an attacker the same level of control as a user physically present at the keyboard.
The fix for this vulnerability involves "improved state management" to address the authentication issue. While Apple has not reported active exploitation of this flaw outside of test environments, the nature of the vulnerability prompted the immediate release of these patches. Cybersecurity startup Bynario's co-founder and CEO, Alfredo Pesoli, reported the vulnerability.
Apple typically bundles numerous fixes into its regular point releases. However, macOS 26.6.1, macOS 15.7.9, and macOS 14.8.9 are unusual as they primarily target this single Screen Sharing flaw and apply only to macOS, leaving other Apple operating systems untouched. This targeted approach suggests the company prioritized patching this specific vulnerability quickly.
Users who have manually enabled Screen Sharing are potentially affected. An attacker would generally need to be on the same local network as the targeted Mac, which limits the scope of a remote attack from the broader internet. However, private home and corporate networks would typically block the necessary connections to exploit the flaw.
Mac users can install the updates by navigating to System Settings, then General, and selecting Software Update. Apple advises users to keep their macOS current as a fundamental security measure. These emergency updates precede Apple's larger software releases expected later this fall, which will introduce new features.