CVE-2026-28930

Received Received - Intake

macOS Tahoe Permissions Issue Exposes User Data

Publication date: 2026-05-11

Last updated on: 2026-05-11

Assigner: Apple Inc.

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be able to access protected user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-11

Last Modified

2026-05-11

Generated

2026-07-11

AI Q&A

2026-05-12

EPSS Evaluated

2026-07-10

NVD

CVE-2026-28930

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos_tahoe	26.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Compliance Impact

This vulnerability involves a permissions issue that could allow an app to access protected user data. Such unauthorized access to protected data can potentially impact compliance with data protection regulations like GDPR and HIPAA, which require strict controls on access to personal and sensitive information.

However, specific details on the impact to compliance with these standards are not provided in the available information.

Mitigation Strategies

The vulnerability is fixed in macOS Tahoe 26.5. To mitigate this issue, you should update your system to macOS Tahoe 26.5 or later.

Executive Summary

This vulnerability is a permissions issue in macOS Tahoe that was addressed by adding additional restrictions. It could allow an application to access protected user data without proper authorization.

Impact Analysis

If exploited, this vulnerability could allow an app to access your protected user data, potentially leading to unauthorized disclosure of personal or sensitive information.

Hi! I’m here to help you understand CVE-2026-28930. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70