CVE-2026-28912: Apple macOS privilege escalation due to logic issue

Executive brief

A security vulnerability in macOS could allow a local user to gain higher-level system permissions than they should normally have. macOS is the operating system used on Apple Mac computers. If exploited, this could allow an unauthorized user to access restricted data or modify critical system settings.

Technical details

A logic issue exists in macOS Sequoia and macOS Tahoe that can lead to local privilege escalation. The vulnerability stems from insufficient restrictions within a system component, allowing a standard user to bypass intended security boundaries. An attacker with local access to the system could exploit this flaw to gain elevated privileges. Apple has addressed this issue by implementing improved restrictions in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.

Affected products

• Apple macOS Sequoia Before 15.7.8
• Apple macOS Tahoe Before 26.6

Timeline

• 2026-07-27: disclosed
• 2026-07-27: patched

References

• https://support.apple.com/en-us/128067
• https://support.apple.com/en-us/128071