Product:
macOS Tahoe
Summary
A logic issue was addressed with improved restrictions. This issue allows a malicious app to potentially break out of its sandbox. The fix is included in macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4 | CVE-2026-28826 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that can bypass the sandbox restrictions. Once the application is executed on a vulnerable system, it may gain unauthorized access to system resources or data, leading to potential security breaches.
Affected Products
- macOS Tahoe: The latest version includes fixes for the logic issue that allows sandbox escape.
Mitigation
Users are advised to update to macOS Tahoe 26.4 to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and improve overall system security.