PT-2026-39818 · Apple · Macos Tahoe

David Ige · CVE-2026-28976 · Published 2026-05-11 · Updated 2026-05-11

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.5

Description An information leakage exists where an app may be able to gain root privileges. This issue was addressed by implementing additional validation.

Recommendations Update to macOS Tahoe 26.5.

Fix

Information Disclosure

Improper Privilege Management

Weakness Enumeration

CWE-200

CWE-269

Related Identifiers

CVE-2026-28976

Affected Products

Macos Tahoe

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-28976 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28976 · Note
• https://support.apple.com/en-us/127115 · Note