Product:
macOS
Summary
A permissions issue was addressed by removing the vulnerable code. This issue may allow an app to access sensitive user data. The vulnerability has been fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-28828 |
Exploitation
The vulnerability can be exploited by an attacker who has access to the network. By leveraging the permissions issue, an app may gain unauthorized access to sensitive user data without requiring any user interaction or elevated privileges.
Affected Products
- macOS Sequoia: Fixed in version 15.7.5
- macOS Sonoma: Fixed in version 14.8.5
- macOS Tahoe: Fixed in version 26.4
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions where the issue has been addressed. Regularly applying security updates is essential to protect sensitive user data from unauthorized access.