Live › vulnerability › CVE-2026-28854
Go to dashboardA maliciously modified macOS app may not be blocked from launching, because the system lacked full app bundle integrity checks. Apple fixed it with additional checks in macOS Golden Gate 27.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Mac users and fleets running macOS releases before Golden Gate 27 are exposed to a tampered app launching. The sources do not say which apps or configurations are needed for the flaw to be reached, so the exposure scope is unknown. Teams on fully patched macOS Golden Gate 27 or later can skip it.
No product ranges from the sources yet.
sw_vers -productVersion on the Mac and compare against the fixed release named by AppleEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.
This page as .md · .json · in your agent: get_signal("CVE-2026-28854")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.