A critical privilege escalation vulnerability in Apple iOS, iPadOS, macOS, and visionOS enables malicious applications to achieve root-level system access.

The flaw involves insufficient validation checks within the operating system, which can be leveraged by a locally installed malicious application to gain root privileges. The attack vector is local, requiring low privileges to execute the malicious application.

The ability for a malicious application to gain root privileges represents a total compromise of the affected device. Successful exploitation allows an attacker to bypass all sandbox protections, access sensitive user data, install persistent malware, or disable security features, leading to significant privacy loss and potential unauthorized access to corporate resources. With a CVSS score of 7.8, this vulnerability poses a high risk to organizational security posture.

Immediate Action: Update all Apple devices to the specified fixed versions: iOS/iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, and visionOS 26.3.

Proactive Monitoring: Monitor system logs for unexpected privilege escalation events or the execution of unauthorized binaries with root permissions.

Compensating Controls: Enforce mobile device management (MDM) policies that restrict the installation of unauthorized or unvetted applications to reduce the likelihood of a malicious app gaining execution context.

Public Exploit Available: Unknown.

Given the severity of root-level privilege escalation, organizations must prioritize the immediate deployment of the identified updates across all managed Apple devices. Failure to patch these systems leaves devices vulnerable to full takeover by malicious applications. Regular software maintenance cycles should be accelerated to ensure these critical security fixes are applied without delay.