Product:
macOS
Summary
This issue was addressed through improved state management. An app may be able to access private information. The issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28922 |
Exploitation
To exploit this vulnerability, an attacker would need to craft a malicious application that can trick the user into interacting with it. Once the user engages with the app, it may gain unauthorized access to private information due to the improper state management.
Affected Products
- macOS Sequoia 15.7.7 – Fixed version addressing the vulnerability.
- macOS Sonoma 14.8.7 – Fixed version addressing the vulnerability.
- macOS Tahoe 26.5 – Fixed version addressing the vulnerability.
Mitigation
To mitigate this issue, users should update their macOS to the latest versions provided by Apple. Regularly applying security updates can help protect against vulnerabilities that may allow unauthorized access to private information.