CVE-2026-28826
Medium · 4.0CVSS
4.0
EPSS
0.2%
Published
Mar 25, 2026
CISA due date
—
The record
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A malicious app may be able to break out of its sandbox.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|