CVE-2026-28954

7.5 Élevée

Publiée le 11/05/2026 à 23:18 · Modifiée le 17/06/2026 à 12:29 · Analysée par le NVD · Source : product-security@apple.com

Description

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A maliciously crafted disk image may bypass Gatekeeper checks.

Traduire en français

Produits concernés

Apple iOS and iPadOS
Apple macOS
Apple ipados
Apple iphone os

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-290

Références

https://support.apple.com/en-us/127111 Release NotesVendor Advisory
https://support.apple.com/en-us/127115 Release NotesVendor Advisory
https://support.apple.com/en-us/127116 Release NotesVendor Advisory
https://support.apple.com/en-us/127117 Release NotesVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories