Logic Issue in macOS Tahoe 26.5 Bypasses Gatekeeper Checks

Publication date: 2026-05-11

Last updated on: 2026-07-27

Assigner: Apple Inc.

Description

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-11

Last Modified

2026-07-27

Generated

2026-07-31

AI Q&A

2026-05-12

EPSS Evaluated

2026-07-30

NVD

CVE-2026-28914

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos_tahoe	to 26.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a logic issue related to file handling in macOS Tahoe. Specifically, a maliciously crafted ZIP archive can bypass Gatekeeper checks, which are security measures designed to prevent untrusted software from running.

Impact Analysis

If exploited, this vulnerability could allow malicious ZIP files to bypass Gatekeeper protections, potentially leading to the execution of untrusted or harmful software on a macOS Tahoe system.

Mitigation Strategies

To mitigate this vulnerability, update your system to macOS Tahoe 26.5 or later, where the issue has been fixed.

Hi! I’m here to help you understand CVE-2026-28914. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70