Live › vulnerability › CVE-2026-28853
Go to dashboardApple's macOS Sequoia and Tahoe have a flaw that lets an installed app raise its privileges on the Mac. The sources say only that Apple fixed it with improved checks and do not describe the exact code path.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any Mac running macOS Sequoia before 15.8 or macOS Tahoe before 26.7 is affected, since the attacker only needs an app running on the machine. The sources do not say which apps or configurations are required, so unknown beyond that. Teams on fully patched or managed macOS fleets with the fixed releases can skip it.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed versions below.15.8 or later.26.7 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-28853")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.