Privilege Escalation in macOS Products by Apple
CVE-2026-28853

7.8HIGH

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
20 October 2026

What is CVE-2026-28853?

A vulnerability in macOS products allows an application to potentially elevate privileges due to inadequate checks. It is crucial for users to ensure they are using the updated versions, macOS Sequoia 15.8 and macOS Tahoe 26.7, to mitigate this risk effectively. Users should remain vigilant and update their systems regularly to protect against possible exploits.

Affected Version(s)

macOS 0 < 15.8

macOS 0 < 26.7

References

https://support.apple.com/en-us/149042
https://support.apple.com/en-us/149043

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.