What is the CVSS score of CVE-2026-28820?

CVE-2026-28820 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2026-28820?

Organizations using This should be aware of moderate risk from CVE-2026-28820, a information exposure vulnerability rated CVSS 5.3. Sensitive information could be exposed to unauthorized parties.. A patch is available.

How to fix or mitigate CVE-2026-28820?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review data exposure and access controls.

macOS CVE-2026-28820

EUVD-2026-15083 MEDIUM

Information Exposure (CWE-200)

2026-03-25 apple

GHSA-764c-2rh3-p2wj

Apple Information Disclosure macOS

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

26.4

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15083

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:32 nvd

MEDIUM 5.3

DescriptionCVE.org

This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.

AnalysisAI

An information disclosure vulnerability in macOS Tahoe allows applications to access sensitive user data through insufficient access controls. The vulnerability affects all versions of macOS prior to version 26.4, where the flaw was remediated through improved permission checking mechanisms. While specific technical details are limited, the vulnerability enables malicious or compromised applications to bypass privacy protections and exfiltrate user information.

Technical ContextAI

This vulnerability resides in macOS Tahoe's application sandboxing and data access control mechanisms, which are fundamental security boundaries designed to prevent unauthorized access to user-sensitive information. The issue stems from inadequate validation checks (CWE category: Improper Access Control) in the operating system's permission enforcement layer. The affected product, identified via CPE (cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*), indicates all macOS versions are potentially vulnerable until patched. Apple addressed this by implementing improved checks in the access control pathway, suggesting the flaw involved bypassing or weakening the application sandbox boundary or inter-process communication (IPC) security mechanisms that normally restrict privileged data access.

RemediationAI

Upgrade macOS Tahoe to version 26.4 or later to apply the improved access control checks. Users and administrators should prioritize this patch across all macOS Tahoe systems, particularly those running user-facing applications or handling sensitive data. Refer to Apple Security Advisory HT126794 (https://support.apple.com/en-us/126794) for detailed patch release notes and deployment guidance. Until patching is completed, mitigate risk by restricting application installation permissions, disabling or removing untrusted third-party applications that request excessive data access permissions, and monitoring system logs for unusual data access patterns via mdatp or similar endpoint detection tools. Additionally, enforce security best practices including code signing verification for all applications and the principle of least privilege for user accounts.