VDB
CVE-2026-28908
CVE-2026-28908
PUBLISHED
CVSS 8.699999809265137 HIGH
A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to modify protected parts of the file system.
EPSS 0.05% · 16.7th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.05%
16.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | macOS | 0, 0, 0 |
Timeline
- May 11, 2026 CVE Published
- May 12, 2026 Security Advisory
- May 12, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
References
- https://support.apple.com/en-us/127115 url
- https://support.apple.com/en-us/127116 url
- https://support.apple.com/en-us/127117 url
- https://nvd.nist.gov/vuln/detail/CVE-2026-28908 advisory
- https://support.apple.com/en-us/127114 advisory
- https://support.apple.com/en-us/127118 advisory
- https://support.apple.com/en-us/127110 advisory
- https://support.apple.com/en-us/127111 advisory
- https://support.apple.com/en-us/127113 advisory
- https://support.apple.com/en-us/127119 advisory
- https://support.apple.com/en-us/127120 advisory
- https://support.apple.com/en-us/127112 advisory