Product:
macOS
Summary
A path handling issue was addressed with improved validation. This issue allows an app to delete files for which it does not have permission. The issue has been fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4 | CVE-2026-28816 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a local system. The application could leverage the path handling issue to gain unauthorized access to files and delete them, even if the app does not have the necessary permissions.
Affected Products
- macOS Sequoia 15.7.5 – Fixed path handling issue that could allow unauthorized file deletion.
- macOS Sonoma 14.8.5 – Addressed vulnerability related to file permissions.
- macOS Tahoe 26.4 – Improved validation to prevent unauthorized file access.
Mitigation
Users are advised to update their macOS to the latest versions to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploits and ensure that the system remains secure.