Product:
macOS
Summary
A logic issue was addressed with improved file handling. This issue is fixed in macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28914 |
Exploitation
An attacker can exploit this vulnerability by creating a malicious ZIP archive that is designed to bypass Gatekeeper checks. When a user attempts to open this archive, the logic flaw allows the archive to be processed without the necessary security checks, potentially leading to unauthorized access or execution of harmful files.
Affected Products
- macOS Tahoe 26.5 – The latest version that addresses the vulnerability.
Mitigation
To mitigate this issue, users should ensure they are running the latest version of macOS, which includes the necessary security updates. Additionally, users should exercise caution when opening ZIP archives from untrusted sources.