What is the CVSS score of CVE-2026-28829?

CVE-2026-28829 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2026-28829?

Organizations using A permissions should be aware of moderate risk from CVE-2026-28829, a incorrect permissions vulnerability rated CVSS 5.5.. A patch is available.

How to fix or mitigate CVE-2026-28829?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review and tighten file/resource permissions.

macOS CVE-2026-28829

EUVD-2026-15100 MEDIUM

Incorrect Permission Assignment for Critical Resource (CWE-732)

2026-03-25 apple

GHSA-hw9m-xc44-8wmp

Apple Information Disclosure macOS

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

26.4,14.8.5,15.7.5

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15100

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:32 nvd

MEDIUM 5.5

DescriptionCVE.org

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system.

AnalysisAI

A permissions enforcement vulnerability in macOS allows applications to modify protected portions of the file system that should be restricted from unauthorized access. This issue affects macOS Sequoia, Sonoma, and Tahoe across multiple versions prior to their patched releases (15.7.5, 14.8.5, and 26.4 respectively). An attacker controlling or tricking a user into running a malicious application could leverage this permissions bypass to modify system-critical files, potentially enabling privilege escalation, persistence mechanisms, or system compromise.

Technical ContextAI

This vulnerability represents a permissions validation weakness in macOS's file system access control mechanisms. The affected products (cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*) indicate the issue spans multiple macOS operating system versions. Rather than a specific CWE being documented, this falls under the broader category of improper access control and authorization failures—applications are bypassing or circumventing the sandboxing and file system permission restrictions that macOS implements to isolate user applications from protected system directories. The root cause involves the macOS kernel's file system enforcement layer not adequately validating application-level access requests to restricted paths before granting modification capabilities.

RemediationAI

Users should immediately upgrade to the patched versions: macOS Sequoia 15.7.5 or later, macOS Sonoma 14.8.5 or later, or macOS Tahoe 26.4 or later, depending on their current OS version. Upgrade instructions and detailed advisory information are provided in Apple's security bulletins at https://support.apple.com/en-us/126794, https://support.apple.com/en-us/126795, and https://support.apple.com/en-us/126796. Until patching is feasible, organizations should enforce additional application vetting and restrict end-user ability to install untrusted applications from outside official Mac App Store sources, minimize the number of applications running with elevated privileges, and monitor file system access to protected directories for suspicious modification attempts. Consider leveraging Mobile Device Management (MDM) to enforce OS updates across enterprise macOS deployments.