CVE-2026-28910

Description

This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files.

PUBLISHED Reserved 2026-03-03 | Published 2026-05-11 | Updated 2026-05-11 | Assigner apple

Problem types

A malicious app may be able to access arbitrary files

Product status

References

support.apple.com/en-us/126794

cve.org (CVE-2026-28910)

nvd.nist.gov (CVE-2026-28910)

Download JSON