Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

CVE-2026-28824: macOS: An app might access your sensitive user data without permission

CVE-2026-28824 · published 7 months ago
Summary

An issue in macOS allowed an app to access your sensitive information. Apple has fixed this in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4. Make sure you have the latest version installed to prevent unauthorized access.

Original advisory text
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access sensitive user ...
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access sensitive user data.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-284Improper Access Control
Timeline
Published25 Mar 2026
Updated4 Nov 2026
First seen25 Mar 2026
Sources
Track software like this
Free during beta