PT-2026-39785 · Apple · Macos Sequoia+2

Arni Hardarson · Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-28922

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.7 macOS Sonoma versions prior to 14.8.7 macOS Tahoe versions prior to 26.5

Description An app may be able to access private information due to a flaw in state management.

Fix

Information Disclosure

Improper Access Control

Weakness Enumeration

CWE-200

CWE-284

Related Identifiers

CVE-2026-28922

Affected Products

Macos Sequoia

Macos Sonoma

Macos Tahoe

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-28922 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28922 · Note
• https://support.apple.com/en-us/127117 · Note
• https://support.apple.com/en-us/127115 · Note
• https://support.apple.com/en-us/127116 · Note