CVE-2026-28844

MEDIUM

macOS < 26.4 - Unprotected User Data Exposure via File Access Issue

Title source: llm
STIX 2.1

Description

A file access issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.4. An attacker may gain access to protected parts of the file system.

References (1)

Core 1

Scores

CVSS v3 6.5
EPSS 0.0001
EPSS Percentile 3.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (2)
Apple/macOS < 26.4
apple/macos < 26.4
Published Mar 25, 2026
Tracked Since Mar 25, 2026