Screen sharing vulnerability CVE-2026-65400

[Ryan Carsten Schmidt]

A few days ago, Apple released macOS updates to fix a critical vulnerability in the built-in screen sharing software, which has been given the designation CVE-2026-65400.

The vulnerability allows an attacker on the network to gain root access to your computer without a username or password. 

The average home user behind a router would not be affected. The vulnerability is only exploitable if you have screen sharing turned on in System Settings and if others can reach your Mac over the network, for example if you are on a public WiFi network or directly on the Internet without an intervening router or firewall.

If that describes you, check if your Mac has already been compromised by looking for a file named com.xmr.miner.plist in /Library/LaunchDaemons/ and/or unexpected high CPU use in Activity Monitor. More info here:

https://www.macminivault.com/security-advisory-critical-macos-screen-sharing-vulnerability-cve-2026-65400/

To eliminate the vulnerability, update to macOS 26.6.1, 15.7.9, or 14.8.9 or later. There are no fixed versions of macOS 13 or earlier. 

Even after updating, I recommend keeping screen sharing off except when you actually need to use it. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macports.org/pipermail/macports-users/attachments/20260810/04937ebe/attachment.htm>