CVE-2026-28844

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Mar 25, 2026

CISA due date

—

The record

A file access issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.4. An attacker may gain access to protected parts of the file system.

Affected packages

Ecosystem	Package	Introduced	Fixed