Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

macOS: Unrestricted directory access in some apps

CVE-2026-28827
Summary

A security issue in the way macOS handles directory paths could allow some apps to break out of their restricted areas. This could potentially lead to unauthorized access to sensitive data. Update to macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, or macOS Tahoe 26.4 to fix the issue.

Original title
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be abl...
Original description
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox.
Published: 25 Mar 2026 · Updated: 25 Mar 2026 · First seen: 25 Mar 2026