CVE-2026-28976
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
An information leakage was addressed with additional validation in macOS Tahoe 26.5, which could allow an app to gain root privileges.
Risk Assessment
Organizations may be exposed to unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update to macOS Tahoe 26.5 to secure the system against potential information leakage.
Other vulnerabilities in macOS Tahoe
See all- CVE-2025-46315High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2025-46313Medium
A logging issue was addressed with improved data redaction. An app may be able to access sensitive user data.
- CVE-2025-43339Medium
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1.
- CVE-2026-43652High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2025-43296Medium
A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.
Original NVD description (English source)
An information leakage was addressed with additional validation. This issue is fixed in macOS Tahoe 26.5. An app may be able to gain root privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS