Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2026-28840

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.4. An app may be able to gain root privileges.

VectorLOCAL

PublishedMay 11, 2026, 21:18

Published Byproduct-security@apple.com

Base Score

Score7.8

Affected Versions

No affected versions found.

References

https://support.apple.com/en-us/126794
https://support.apple.com/en-us/127116
https://support.apple.com/en-us/127117

Weakness Type

CWE-269

CVSS Metrics

Base Score

7.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

LOCAL