Product:
macOS
Summary
An authorization issue was addressed with improved state management. This issue allows an app to potentially access sensitive user data. The problem has been fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28831 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the affected system. By leveraging the authorization issue, the attacker could run a malicious application that accesses sensitive user data without proper permissions. This could lead to unauthorized data exposure.
Affected Products
- macOS Sequoia 15.7.5: Fixed the authorization issue with improved state management.
- macOS Sonoma 14.8.5: Addressed the vulnerability to prevent unauthorized access to sensitive data.
- macOS Tahoe 26.4: Resolved the issue to enhance user data protection.
Mitigation
To mitigate this vulnerability, users should update their systems to the latest versions of macOS Sequoia, Sonoma, or Tahoe. Regularly applying security updates and patches is essential to protect against potential exploits.