CVE-2026-28919

macOS Privilege Escalation via State Handling Vulnerability

View on CVE.org
Published May 11, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
A consistency issue was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to gain root privileges.

Analysis

AI-generated

Technical impact

Apple identified a consistency flaw in macOS state‑handling logic that represents an improper authorization (CWE‑269) and can be abused by an application to obtain root privileges on the affected system.

Affected Systems

The vulnerability affects macOS installations older than Sequoia 15.7.7, Sonoma 14.8.7, and Tahoe 26.5 until the corresponding update is applied.

Risk and Exploitability

The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1% suggests a very low probability of exploitation. It is not listed in the CISA KEV catalog. The most likely attack vector is local user‑level execution of a malicious application, as no network‑based attack path is documented.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest macOS update (Sequoia 15.7.7, Sonoma 14.8.7, or Tahoe 26.5) and reboot to apply the state‑handling fix.
  • Enable automatic updates or regularly check for macOS security updates to keep the system current.
  • If an update cannot be applied immediately, restrict execution of unverified third‑party applications until a patch is installed.

Generated by OpenCVE AI on May 12, 2026 at 18:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title macOS Privilege Escalation via State Handling Vulnerability
Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Type Values Removed Values Added
Title Root Privilege Escalation in macOS State Handling
Weaknesses CWE-284
CWE-732
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Title Root Privilege Escalation in macOS State Handling
Weaknesses CWE-269
CWE-284
CWE-732
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos
Type Values Removed Values Added
Description A consistency issue was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to gain root privileges.
References
Earlier changes (2)
Weaknesses
  • CWE-269

    Improper Privilege Management

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
May 12, 2026, 1:09 PM
Reserved
Mar 3, 2026, 4:36 PM

View source JSON

Updated
May 12, 2026, 1:09 PM

JSON

Status
Analyzed
Published
May 11, 2026, 9:18 PM
Modified
Oct 26, 2026, 6:10 PM

View source JSON

No data.

Updated
May 12, 2026, 6:45 PM

JSON