CVE-2026-78236 — Insecure PIN derivation mechanism in Admin By Request (ABR)
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while ma…
Published: 2026-08-26 · CVSS: 8.8 · CVSS 3.1
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7