Product:
macOS
Summary
A use-after-free issue was addressed with improved memory management. This issue may lead to system termination when mounting a maliciously crafted SMB network share. The vulnerability has been fixed in the latest versions of macOS Sequoia, Sonoma, and Tahoe.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28835 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious SMB network share and entice a user to mount it. Once the share is mounted, the use-after-free condition can be triggered, potentially leading to system termination. User interaction is required for the exploitation to succeed.
Affected Products
- macOS Sequoia: Fixed in version 15.7.5
- macOS Sonoma: Fixed in version 14.8.5
- macOS Tahoe: Fixed in version 26.4
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions provided by Apple. Regularly applying security updates and being cautious about mounting network shares from untrusted sources can help prevent exploitation.