APPLE has addressed a significant privilege escalation vulnerability in macOS, tracked as CVE-2026-39875, allowing malicious applications to gain root access by exploiting flaws in the CUPS system. The researcher Dallas Dubs has shared detailed technical information and a proof-of-concept exploit. Key points include: CVSS score of 7.8, affecting versions prior to 14.8.8, 15.7.8, and 26.6.
No confirmed exploitation has been reported, but affected users are strongly advised to update their systems immediately due to the availability of the public exploit.