CVE-2026-28881

Medium · 5.5

CVSS

5.5

EPSS

0.2%

Published

Mar 25, 2026

CISA due date

—

The record

A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.

Ecosystem	Package	Introduced	Fixed