PT-2026-27557 · Apple · Macos Sequoia+3

CVE-2026-28821

·

Publicado

2026-03-24

·

Atualizado

2026-04-15

CVSS v3.1

8.4

Alta

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.5 macOS versions prior to Sonoma 14.8.5 macOS versions prior to Tahoe 26.4
Description A flaw existed in how the system verified process entitlements, potentially allowing an application to gain higher-level privileges than intended. The issue was resolved by enhancing the validation process for entitlements.
Recommendations Update to macOS Sequoia version 15.7.5 or later. Update to macOS Sonoma version 14.8.5 or later. Update to macOS Tahoe version 26.4 or later.

Correção

Improper Access Control

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284CWE-20

Identificadores relacionados

CVE-2026-28821

Produtos afetados

Apple Macos
Macos Sequoia
Macos Sonoma
Macos Tahoe