Product:
macOS
Summary
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to modify protected parts of the file system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28892 |
Exploitation
To exploit this vulnerability, an attacker with local access could run a malicious application that takes advantage of the permissions issue to modify protected areas of the file system. This could lead to unauthorized changes and potential data compromise.
Affected Products
- macOS Sequoia: Fixed in version 15.7.5, addresses permissions issues.
- macOS Sonoma: Fixed in version 14.8.5, resolves vulnerabilities related to file system access.
- macOS Tahoe: Fixed in version 26.4, mitigates risks of unauthorized modifications.
Mitigation
Users are advised to update their macOS to the latest versions to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploitation of similar issues in the future.