Product:
macOS
Summary
An authorization issue was addressed with improved state management. This issue may allow an app to access sensitive user data. The problem has been fixed in multiple versions of macOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-28824 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that takes advantage of the authorization issue. By tricking users into installing and running the app, the attacker could gain unauthorized access to sensitive user data without requiring any special privileges or user interaction.
Affected Products
- macOS Sequoia 15.7.5 – Fixed the authorization issue with improved state management.
- macOS Sonoma 14.8.5 – Addressed the vulnerability to prevent unauthorized access to sensitive data.
- macOS Tahoe 26.4 – Resolved the issue to enhance user data protection.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest version as specified in the security updates. Regularly checking for updates and applying them promptly can help protect against potential exploitation of this issue.