ZIP Archive Bypass Vulnerability in Apple macOS Products
CVE-2026-28849

Currently unrated

Key Information:

Vendor: Apple
Status: Mac OS
Vendor: CVE Published:; 27 July 2026

What is CVE-2026-28849?

A vulnerability has been identified in Apple macOS that enables a maliciously crafted ZIP archive to bypass Gatekeeper checks, potentially allowing unauthorized applications to be executed. This issue has been addressed through improved validation mechanisms, with patches released in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 to enhance the security of the operating system and protect users from such exploitation.

Affected Version(s)

macOS 0 < 14.8.8

macOS 0 < 15.7.8

References

https://support.apple.com/en-us/128071

https://support.apple.com/en-us/128072

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 27, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28849 Data

JSON