{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-28893", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2026-03-03T16:36:03.981Z", "datePublished": "2026-03-25T00:31:43.154Z", "dateUpdated": "2026-03-25T00:31:43.154Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "A document may be written to a temporary file when using print preview"}]}], "affected": [{"vendor": "Apple", "product": "macOS", "versions": [{"version": "0", "status": "affected", "lessThan": "26.4", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A document may be written to a temporary file when using print preview."}], "references": [{"url": "https://support.apple.com/en-us/126794"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2026-03-25T00:31:43.154Z"}}}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "matchCriteriaId": "6CF848CD-25D4-4371-BEF3-1ACCE47AD81F", "versionEndExcluding": "26.4", "versionStartIncluding": "26.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A document may be written to a temporary file when using print preview."}], "id": "CVE-2026-28893", "lastModified": "2026-03-25T20:30:27.543", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-03-25T01:17:12.777", "references": [{"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "https://support.apple.com/en-us/126794"}], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "macOS", "source": "cna", "vendor": "Apple"}, "product": "macos", "vendor": "apple"}], "analysis": {"en": {"generated_at": "2026-03-25T20:51:29.782134+00:00", "value": {"mitigation_remediation": ["Upgrade to macOS 26.4 or later, ensuring that system updates include the fix for temporary file handling.", "Verify that temporary files created by print preview are stored securely and deleted promptly after use.", "If an update cannot be applied immediately, avoid using the print preview feature in untrusted or shared environments until the patch is installed."], "summary": {"action": "Patch", "impact": "Privacy Disclosure"}, "threat_synthesis": {"affected_systems": "Apple\u2019s macOS versions released before macOS Tahoe 26.4 are affected. The issue was addressed in macOS Tahoe 26.4 and later releases.", "description_and_impact": "The flaw lies in how macOS handles temporary files during the print preview process. A document is written to a temporary file, and if the file is not properly protected or cleaned up, an attacker could read it, exposing potentially sensitive information. This weakness leads to an information disclosure vulnerability.", "risk_and_exploitability": "The overall severity is low, with a CVSS score of 3.3 and an EPSS score of less than 1%, indicating a very small likelihood of exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Based on the description, the attack vector is inferred to be local; an attacker would need the ability to trigger a print preview on the target machine. No public exploits have been reported, so the risk remains modest."}}}}, "created": "2026-03-25T11:36:59.744999+00:00", "title": "Temporary File Disclosure in macOS Print Preview", "updated": "2026-03-25T20:56:44.410969+00:00", "vendors": ["apple", "apple$PRODUCT$macos"]}