Product:
macOS
Summary
A consistency issue was addressed with improved state handling. This issue allows an app to potentially gain root privileges. The vulnerability has been fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-28919 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable version of macOS. The app could leverage the inconsistency in state handling to escalate privileges and gain root access, allowing the attacker to perform unauthorized actions on the system.
Affected Products
- macOS Sequoia 15.7.7 – Fixed the vulnerability with improved state handling.
- macOS Sonoma 14.8.7 – Addressed the issue to prevent potential root privilege escalation.
- macOS Tahoe 26.5 – Updated to mitigate the vulnerability.
Mitigation
Users are advised to update their macOS to the latest versions to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploits that take advantage of such issues.