Product:
macOS
Summary
A race condition was addressed with additional validation. This issue allows an app to potentially break out of its sandbox. The vulnerability has been fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2026-28891 |
Exploitation
To exploit this vulnerability, an attacker would need to execute a specially crafted application that takes advantage of the race condition. This could allow the application to escape its sandbox environment, leading to unauthorized access to system resources and data.
Affected Products
- macOS Sequoia 15.7.5: Fixed the race condition vulnerability.
- macOS Sonoma 14.8.5: Addressed the issue with additional validation.
- macOS Tahoe 26.4: Resolved the sandbox escape vulnerability.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions provided by Apple. Regularly applying security updates is crucial to protect against potential exploits.