CVE-2026-28915

7.8 Élevée

Publiée le 11/05/2026 à 23:18 · Modifiée le 17/06/2026 à 12:29 · Analysée par le NVD · Source : product-security@apple.com

Description

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to gain root privileges.

Traduire en français

Produits concernés

Apple macOS

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-22

Références

https://support.apple.com/en-us/127115 Release NotesVendor Advisory
https://support.apple.com/en-us/127116 Release NotesVendor Advisory
https://support.apple.com/en-us/127117 Release NotesVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories