Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-28914

A logic issue was addressed with improved file handling. This issue is fixed in macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

VectorLOCAL

PublishedMay 11, 2026, 21:18

Published Byproduct-security@apple.com

Base Score

Score5.5

Affected Versions

No affected versions found.

References

https://support.apple.com/en-us/127115

Weakness Type

CWE-358

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL