CVE-2026-78236
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Aug 26, 2026
Vendor
unknown
Description
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.