Product:
macOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to potentially gain root privileges. The vulnerability has been fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-28840 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable version of macOS. Given the low attack complexity and the requirement for local access, an attacker could leverage this flaw to escalate privileges and gain unauthorized access to system resources.
Affected Products
- macOS Sequoia 15.7.7 – Fixed permissions issue that could allow root access.
- macOS Sonoma 14.8.7 – Addressed vulnerability with additional restrictions.
- macOS Tahoe 26.4 – Resolved issue that could enable apps to gain elevated privileges.
Mitigation
Users are advised to update their macOS to the latest versions to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploitation of this and other vulnerabilities.