Product:
macOS Tahoe
Summary
An authorization issue was addressed with improved state management. This issue allows an app to potentially access protected user data. The vulnerability has been fixed in the latest version of macOS Tahoe.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28845 |
Exploitation
To exploit this vulnerability, an attacker would need local access to the affected system. By leveraging the authorization issue, the attacker could run a malicious application that accesses protected user data without proper authorization. User interaction is required to execute the malicious application, making it essential for the attacker to trick the user into running it.
Affected Products
- macOS Tahoe: The latest version addresses the authorization issue that could allow unauthorized access to user data.
Mitigation
To mitigate this vulnerability, users should update to the latest version of macOS Tahoe where the issue has been resolved. Regularly applying security updates and being cautious about the applications installed on the system can help prevent exploitation.