Product:
macOS
Summary
A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to modify protected parts of the file system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28908 |
Exploitation
To exploit this vulnerability, an attacker could send specially crafted network packets to the affected macOS systems. If successful, this could lead to a denial of service condition, impacting the availability of the system. The low attack complexity means that even less skilled attackers could potentially exploit this issue without needing special privileges or user interaction.
Affected Products
- macOS Sequoia: Fixed in version 15.7.7
- macOS Sonoma: Fixed in version 14.8.7
- macOS Tahoe: Fixed in version 26.5
Mitigation
Users are advised to update their macOS systems to the latest versions to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploits and ensure system integrity.