PT-2026-39779 · Apple · Macos Tahoe+1

Andreas Jaegersberger + 1 · CVE-2026-28914 · Published 2026-05-11 · Updated 2026-05-14

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.5

Description A logic issue involving file handling allows a maliciously crafted ZIP archive to bypass Gatekeeper checks. Gatekeeper is a security feature that ensures only trusted software runs on the system.

Recommendations Update to macOS Tahoe 26.5.

Fix

DoS

Protection Mechanism Failure

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-693

CWE-358

Related Identifiers

CVE-2026-28914

Affected Products

Apple Macos

Macos Tahoe

References · 6

• https://support.apple.com/en-us/127115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28914 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28914 · Note
• https://support.apple.com/en-us/128071 · Note
• https://support.apple.com/en-us/128072 · Note
• https://t.me/cveNotify/163451 · Telegram Post