CVE-2026-28910
This issue was addressed with improved permissions checking
Low · published May 11, 2026
What it is
This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files.
The record
Technical detail
- CVSS v3.1
- 3.3 · LOW
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00136 · 2.7th percentile
- Published
- 2026-05-11T20:08Z
EPSS history
Timeline