What is the CVSS score of CVE-2026-28824?

CVE-2026-28824 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2026-28824?

Organizations using An authorization should be aware of moderate risk from CVE-2026-28824, a improper access control vulnerability rated CVSS 5.3.. A patch is available.

How to fix or mitigate CVE-2026-28824?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

macOS CVE-2026-28824

EUVD-2026-15091 MEDIUM

Improper Access Control (CWE-284)

2026-03-25 apple

Apple Authentication Bypass macOS

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

26.4,15.7.5,14.8.5

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15091

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:32 nvd

MEDIUM 5.3

DescriptionCVE.org

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access sensitive user data.

AnalysisAI

An authorization bypass vulnerability in macOS allows applications to access sensitive user data through improper state management of access controls. The vulnerability affects macOS Sequoia (before 15.7.5), macOS Sonoma (before 14.8.5), and macOS Tahoe (before 26.4). While no CVSS score, EPSS data, or KEV status is currently published, Apple has released patches addressing this issue, indicating it was discovered through internal review rather than active exploitation.

Technical ContextAI

This vulnerability stems from an authorization/access control failure (related to CWE class vulnerabilities involving improper state management) in the macOS operating system kernel or system frameworks that handle application sandbox and entitlement enforcement. The affected products, as specified by CPE cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*, span multiple macOS versions. The root cause appears to be inadequate state validation when applications request access to protected user data resources, allowing improper elevation of privilege or bypass of OS-level access controls that normally mediate inter-process communication and file/resource access boundaries.

RemediationAI

Immediately upgrade to patched versions: macOS Sequoia 15.7.5 or later, macOS Sonoma 14.8.5 or later, or macOS Tahoe 26.4 or later. Users should access System Settings > General > Software Update and install available updates. For enterprise environments, deploy updates via Mobile Device Management (MDM) or Software Update Server (SUS) to ensure rapid rollout. Until updates can be deployed, restrict application installation to trusted sources only, disable untrusted third-party applications, and review system audit logs (log stream in Terminal) for suspicious inter-process access patterns. Consult Apple support documents at https://support.apple.com/en-us/126794, https://support.apple.com/en-us/126795, and https://support.apple.com/en-us/126796 for additional details and confirmation of patch status.