Apple Patches Critical macOS Screen Sharing Flaw to Block Remote Takeovers
Emergency updates for macOS Tahoe, Sequoia, and Sonoma fix a high-severity vulnerability that allowed unauthorized remote control.
Apple has released emergency security updates for three versions of macOS to resolve a high-severity vulnerability in the Screen Sharing app. The flaw potentially allowed attackers to view and control a Mac on the same network without proper authentication.
According to reports from MacRumors and ZDNET, the vulnerability, identified as CVE-2026-65400, enabled attackers to bypass the required username and password authentication. This allowed unauthorized users on the same local network to gain full remote access to a target machine. To mitigate the risk, Apple pushed immediate patches for macOS Tahoe (version 26.6.1), macOS Sequoia (version 15.7.9), and macOS Sonoma (version 14.8.9).
The Role of Screen Sharing
Screen Sharing is a native macOS feature designed to let users remotely view and control another Mac located on the same local network. Under standard security protocols, the system is designed to block any remote connection unless the user provides valid credentials, ensuring that only authorized individuals can access the machine's desktop and files. This built-in layer of security is what the CVE-2026-65400 flaw effectively neutralized.
Why This Vulnerability Is Critical
Because the flaw bypasses the authentication process entirely, it represents a severe security risk for users operating on shared or compromised networks. In a corporate office, a public Wi-Fi environment, or a home network with multiple devices, an attacker could potentially seize full control of a Mac without the owner's knowledge or credentials. This level of access could lead to data theft, the installation of malware, or the complete compromise of the user's digital identity.
Next Steps for Users
Apple is urging all users of the affected operating systems to update their software immediately. Users can check for these updates via System Settings to ensure they are running the patched versions of Tahoe, Sequoia, or Sonoma. While the emergency patches address the immediate vulnerability, security experts recommend that users remain vigilant about the networks they join and consider disabling Screen Sharing if the feature is not actively required for their workflow.