PT-2026-27607 · Apple · Macos Sequoia+3

Publicado 2026-03-24 · Atualizado 2026-04-04 · CVE-2026-28891

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4

Description A race condition existed that was addressed through added validation. This allowed an application to potentially escape its sandbox.

Recommendations Update macOS to version 15.7.5. Update macOS to version 14.8.5. Update macOS to version 26.4.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

BDU:2026-05196

CVE-2026-28891

Produtos afetados

Apple Macos

Macos Sequoia

Macos Sonoma

Macos Tahoe

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-28891 · Nota de Segurança
• https://support.apple.com/en-us/126795 · Aviso do Fabricante
• https://support.apple.com/en-us/126794 · Aviso do Fabricante
• https://support.apple.com/en-us/126796 · Aviso do Fabricante
• https://cve.org/CVERecord?idCVE-2026-28891 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-05196 · Nota de Segurança
• https://safe-surf.ru/specialists/bulletins-nkcki/730326 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28891 · Nota
• https://twitter.com/CVEarity/status/2040321976888430698 · Publicação no Twitter