CVE-2026-28976
HighSummary
An information leakage was addressed with additional validation in macOS Tahoe 26.5, which could allow an app to gain root privileges.
Risk Assessment
Organizations may be exposed to unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update to macOS Tahoe 26.5 to secure the system against potential information leakage.
Other vulnerabilities in macOS Tahoe
See all- CVE-2026-43652High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2026-28930High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2025-46315High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2025-46313Medium
A logging issue was addressed with improved data redaction. An app may be able to access sensitive user data.
- CVE-2025-43339Medium
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1.
Original NVD description (English source)
An information leakage was addressed with additional validation. This issue is fixed in macOS Tahoe 26.5. An app may be able to gain root privileges.