Product:
macOS Tahoe
Summary
This issue was addressed with improved checks. An app may be able to access sensitive user data. The issue is fixed in macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-28820 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious application that takes advantage of the insufficient checks in place. By running this application, the attacker may gain unauthorized access to sensitive user data without requiring elevated privileges or user interaction.
Affected Products
- macOS Tahoe: Fixed in version 26.4, this product had vulnerabilities allowing unauthorized access to sensitive user data.
Mitigation
To mitigate this issue, users should ensure they are running the latest version of macOS Tahoe, which includes the necessary security updates to prevent unauthorized access to sensitive data.