isaiahehlert/CVE-2026-84589-macOS-TCC-Bypass

PoC

CVE-2026-84589: macOS TCC privacy bypass via FaceTime impersonation. Technical PoC analysis, Apple disclosure timeline, and patch coverage.

view exploit source poc_in_githubauthor isaiahehlertpublished 2026-10-26catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-84589US	medium5.5OT elevated	0.14% (3rd)	Exploit	2026-09-14
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to modify Privacy preferences.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.