What is the CVSS score of CVE-2026-28832?

CVE-2026-28832 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of macOS are affected by CVE-2026-28832?

CVE-2026-28832 is a HIGH severity kernel memory disclosure vulnerability affecting macOS (Sequoia, Sonoma, and Tahoe) that allows locally-running applications to access sensitive kernel data,…. A patch is available.

How to fix or mitigate CVE-2026-28832?

Within 24 hours: Inventory all macOS systems running Sequoia pre-15.7.5, Sonoma pre-14.8.5, or Tahoe pre-26.4; isolate high-risk endpoints from sensitive networks if immediate patching is infeasible. Within 7 days: Apply vendor patches-Sequoia 15.7.5 or later, Sonoma 14.8.5 or later, Tahoe 26.4 or later-to all affected devices via MDM or manual update. Within 30 days: Complete patching validation across all macOS inventory; implement application-level controls to restrict execution of unsigned/untrusted binaries on unpatched systems.

macOS CVE-2026-28832

EUVD-2026-15102 HIGH

Out-of-bounds Read (CWE-125)

2026-03-25 apple

GHSA-gcmr-7g8c-mq4f

Buffer Overflow Apple Information Disclosure macOS

8.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:16 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

26.4,14.8.5,15.7.5

EUVD ID Assigned

Mar 25, 2026 - 01:00 euvd

EUVD-2026-15102

Analysis Generated

Mar 25, 2026 - 01:00 vuln.today

CVE Published

Mar 25, 2026 - 00:32 nvd

HIGH 8.4

DescriptionCVE.org

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to disclose kernel memory.

AnalysisAI

macOS versions prior to Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 contain an out-of-bounds read vulnerability that allows local applications to access and disclose sensitive kernel memory. An attacker with the ability to run code on an affected system can exploit this memory disclosure to obtain privileged information that may aid in further system compromise. No patch is currently available for this HIGH severity vulnerability.

Technical ContextAI

This vulnerability represents a classic out-of-bounds read condition in kernel-level code, classified under buffer overflow/memory safety issues. The root cause involves insufficient bounds validation when memory is accessed, allowing reads beyond allocated buffer boundaries. The affected technology spans the macOS kernel across multiple major versions (Sequoia, Sonoma, and Tahoe codelines), as indicated by the CPE string cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:* which encompasses all macOS versions. The fix was implemented through improved bounds checking mechanisms in the kernel memory access pathways, suggesting the vulnerability likely exists in low-level kernel drivers or system services that interact with user-space applications.

RemediationAI

Users should immediately update to the patched versions: macOS Sequoia 15.7.5 or later, macOS Sonoma 14.8.5 or later, or macOS Tahoe 26.4 or later, depending on which version is currently running. Detailed patch notes and download instructions are available at the vendor security advisories (https://support.apple.com/en-us/126794 for Sequoia, https://support.apple.com/en-us/126795 for Sonoma, and https://support.apple.com/en-us/126796 for Tahoe). Until patches can be applied, organizations should restrict execution of untrusted applications and enforce strong code-signing policies on installed software using macOS security tools (Gatekeeper, System Integrity Protection). Users running older unsupported macOS versions should prioritize upgrading to one of the supported versions receiving patches.