CVE-2026-28912

Undergoing Analysis Undergoing Analysis - In Progress

Privilege Escalation in macOS Sequoia

Publication date: 2026-07-27

Last updated on: 2026-07-29

Assigner: Apple Inc.

Description

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A user may be able to elevate privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-29

Generated

2026-08-17

AI Q&A

2026-07-28

EPSS Evaluated

2026-08-15

NVD

CVE-2026-28912

EUVD

EUVD-2026-49491

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 15.0 (inc) to 15.7.8 (exc)
apple	macos	From 26.0 (inc) to 26.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-693	The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

Executive Summary

This is a logic issue in macOS Sequoia and Tahoe versions that could allow a user to elevate their privileges beyond normal limits. It was addressed by applying stricter restrictions to prevent unauthorized privilege escalation.

Detection Guidance

This vulnerability is specific to macOS Sequoia and Tahoe versions before 15.7.8 and 26.6 respectively. Detection involves checking your macOS version against the patched releases. Use the command 'sw_vers' in Terminal to check your current macOS version. If your version is below 15.7.8 for Sequoia or 26.6 for Tahoe, the system is vulnerable.

Impact Analysis

If exploited, this vulnerability could let an attacker gain higher-level access to your system than intended. This might allow them to install software, modify data, or perform other actions with elevated permissions.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves a logic issue allowing privilege escalation, which could potentially lead to unauthorized access or data breaches. However, without explicit details on data exposure or system access, its compliance impact remains unclear.

Mitigation Strategies

Update to macOS Sequoia 15.7.8 or macOS Tahoe 26.6 or later to address the privilege escalation issue.

Hi! I’m here to help you understand CVE-2026-28912. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70