What is the CVSS score of CVE-2026-28945?

CVE-2026-28945 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.2%.

How to fix or mitigate CVE-2026-28945?

Within 24 hours, identify all macOS devices running versions prior to Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6 and begin prioritizing updates for high-risk users (e.g., executives, developers). Within 7 days, deploy the vendor-released patches via mobile device management (MDM) or manual updates to all affected systems. Within 30 days, verify patch compliance and review endpoint detection rules for behaviors indicative of local privilege escalation attempts. Reinforce user awareness training to discourage installation of untrusted applications.

Apple CVE-2026-28945

Q: Which versions of Apple are affected by CVE-2026-28945?

A local privilege escalation vulnerability in macOS could allow a malicious application to bypass network restrictions, potentially exposing sensitive corporate data or manipulating network traffic.. A patch is available.

EUVD-2026-49494 HIGH

Improper Access Control (CWE-284)

2026-07-27 apple

GHSA-8574-xjhr-vxc8

Authentication Bypass Apple

7.1

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

7.1 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 20:35 vuln.today

CVSS changed

Jul 28, 2026 - 16:22 NVD

7.1 (HIGH)

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:12 cve.org

HIGH 7.1

CVE Published

Jul 27, 2026 - 20:12 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bypass network restrictions.

AnalysisAI

Local privilege escalation in macOS allows a malicious application to bypass network restrictions, potentially exposing sensitive data or manipulating network traffic. The vulnerability affects macOS versions prior to Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, and requires user interaction (e.g., installing a rogue app). Apple has released patches; no active exploitation or public exploit code has been identified.