Product:
macOS Tahoe
Summary
A privacy issue was addressed by moving sensitive data. An app may be able to access sensitive user data. This issue is fixed in macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28881 |
Exploitation
To exploit this vulnerability, an attacker with local access could potentially run a malicious application that accesses sensitive user data due to improper handling of privacy settings. The low attack complexity means that even users with minimal technical skills could exploit this issue if they have access to the affected system.
Affected Products
- macOS Tahoe 26.4 – Fixed the privacy issue by moving sensitive data to prevent unauthorized access.
Mitigation
Users are advised to update to macOS Tahoe 26.4 to mitigate this privacy issue. Regularly updating software can help protect against vulnerabilities and ensure sensitive data is handled securely.