Product:
macOS
Summary
A race condition was addressed with improved state handling. This issue allows an app to potentially gain root privileges. The vulnerability is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2026-28888 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable version of macOS. The application could take advantage of the race condition to escalate its privileges to root, allowing it to perform unauthorized actions on the system.
Affected Products
- macOS Sequoia 15.7.5 – Fixed version addressing the race condition.
- macOS Sonoma 14.8.5 – Updated to mitigate the vulnerability.
- macOS Tahoe 26.4 – Includes the necessary security improvements.
Mitigation
Users are advised to update their macOS to the latest versions to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploitation of this and other vulnerabilities.