Product:
macOS
Summary
A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28837 |
Exploitation
The vulnerability can be exploited by an attacker who has network access to the affected system. By sending specially crafted requests, the attacker may gain unauthorized access to sensitive user data without requiring any user interaction or privileges.
Affected Products
- macOS Tahoe 26.4: The latest version that addresses the logic issue.
Mitigation
To mitigate this vulnerability, users should update to macOS Tahoe 26.4 or later. Regularly applying security updates and patches is essential to protect against potential exploits.