Product:
macOS
Summary
A race condition was addressed with improved state handling. This issue allows a sandboxed process to potentially circumvent sandbox restrictions. The issue has been fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2026-28817 |
Exploitation
To exploit this vulnerability, an attacker would need to execute a malicious process within a sandboxed environment. By taking advantage of the race condition, the attacker could manipulate the state handling to bypass the restrictions imposed by the sandbox, allowing unauthorized access to system resources.
Affected Products
- macOS Sequoia 15.7.5 – Fixed the race condition issue.
- macOS Sonoma 14.8.5 – Addressed the vulnerability with improved state handling.
- macOS Tahoe 26.4 – Resolved the sandbox circumvention issue.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions provided by Apple. Regularly applying security updates and patches is essential to protect against potential exploitation of this and other vulnerabilities.