What is the CVSS score of CVE-2026-28828?

CVE-2026-28828 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2026-28828?

Organizations using A permissions should be aware of moderate risk from CVE-2026-28828, a improper access control vulnerability rated CVSS 5.3.. A patch is available.

How to fix or mitigate CVE-2026-28828?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

macOS CVE-2026-28828

EUVD-2026-15099 MEDIUM

Improper Access Control (CWE-284)

2026-03-25 apple

GHSA-g62v-q2rm-gw7j

Apple Authentication Bypass macOS

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

26.4,14.8.5,15.7.5

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15099

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:32 nvd

MEDIUM 5.3

DescriptionCVE.org

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access sensitive user data.

AnalysisAI

A permissions enforcement vulnerability in macOS allows unauthorized applications to access sensitive user data due to insufficient access controls that have been remediated through code removal. The vulnerability affects macOS Sequoia (versions prior to 15.7.5), macOS Sonoma (versions prior to 14.8.5), and macOS Tahoe (versions prior to 26.4). An unprivileged application could potentially read or access protected user information without proper user consent or authorization, representing a confidentiality breach with moderate real-world impact depending on the specific data accessible.

Technical ContextAI

This vulnerability represents a permissions issue classified as an information disclosure flaw affecting Apple's macOS operating system across multiple versions. The root cause appears to be insufficient access control enforcement in macOS kernel or system services, allowing applications to bypass the security model that normally restricts access to sensitive user data. According to the affected CPE specification (cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*), the vulnerability impacts multiple macOS releases, suggesting the vulnerable code was present across several OS versions. Apple's remediation approach of removing the vulnerable code entirely indicates the issue was likely in a specific subsystem or permission-checking function rather than a design-level flaw, suggesting the vulnerability required direct code execution within application context to exploit.

RemediationAI

Immediately upgrade affected macOS installations to the patched versions: macOS Sequoia 15.7.5 or later, macOS Sonoma 14.8.5 or later, or macOS Tahoe 26.4 or later. Refer to Apple's official security advisories at https://support.apple.com/en-us/126794, https://support.apple.com/en-us/126795, and https://support.apple.com/en-us/126796 for detailed patch availability and installation instructions. For environments requiring staged rollout, apply security updates to systems handling the most sensitive user data first. Until patching is complete, organizations should reinforce application whitelisting policies and monitor system logs for unusual data access patterns by applications. Consider restricting installation of third-party applications from untrusted sources on systems containing sensitive data until patches are applied.