---
id: "CVE-2026-28853"
kind: "vulnerability"
aliases: ["CVE-2026-28853"]
title: "macOS: a local app can gain elevated privileges through a missing check"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple", "endpoints", "infrastructure", "macos"]
not_affected_if: ["patched-macos"]
published_at: "2026-10-20T01:17:11+00:00"
first_seen_at: "2026-10-23T21:57:19+00:00"
updated_at: "2026-10-25T03:10:10+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28853", "first_seen_at": "2026-10-23T21:57:19+00:00"}]
---

# macOS: a local app can gain elevated privileges through a missing check

Apple's macOS Sequoia and Tahoe have a flaw that lets an installed app raise its privileges on the Mac. The sources say only that Apple fixed it with improved checks and do not describe the exact code path.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `sw_vers -productVersion` and compare against the fixed versions below.
- unknown

## Fix

- Update macOS Sequoia to `15.8` or later.
- Update macOS Tahoe to `26.7` or later.

## Timeline

- 2026-10-23T21:57:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-28853

## From the sources

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_