CVE-2026-28844: Apple macOS

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A file access issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.4. An attacker may gain access to protected parts of the file system.

Affected products

• Apple macOS: before 26.4 (fixed in 26.4)

Published 2026-03-25. Last modified 2026-06-17.