Product:
macOS
Summary
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. An app may be able to gain elevated privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2026-28821 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a local system. The application could leverage the validation issue to gain elevated privileges, allowing it to perform unauthorized actions or access sensitive data.
Affected Products
- macOS Sequoia: Fixed in version 15.7.5
- macOS Sonoma: Fixed in version 14.8.5
- macOS Tahoe: Fixed in version 26.4
Mitigation
Users are advised to update their macOS to the latest versions to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploitation of this and other vulnerabilities.