Description
This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. An attacker with physical access to a locked device may be able to view sensitive user information.
Published: 2026-05-11
Score: 4.6 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability allows an attacker with physical access to a locked macOS device to view sensitive user information. The flaw is mitigated by improved checks and is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5. The primary impact is the disclosure of confidential data, potentially compromising personal files and credentials.

Affected Systems

Apple macOS devices prior to macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5 are affected. The issue has been addressed in those versions and later releases.

Risk and Exploitability

The CVSS score is 4.6, indicating a moderate severity. The EPSS score is less than 1%, suggesting a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires physical proximity to a locked device; no network access is needed. Attackers who gain such access can read data without authentication, posing a risk primarily to users with less strict physical security.

Generated by OpenCVE AI on August 4, 2026 at 08:35 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, or a later release that includes the fix
  • Configure the device to lock automatically when idle and use a strong passcode or biometric authentication
  • Implement physical security controls to prevent unauthorized access such as lockable cases or secure storage when the device is unattended

Generated by OpenCVE AI on August 4, 2026 at 08:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 09:00:00 +0000

Type Values Removed Values Added
Title Physical Access Information Disclosure on Locked macOS Devices

Fri, 31 Jul 2026 18:15:00 +0000

Type Values Removed Values Added
Title Physical Access Vulnerability Allows Sensitive Data Exposure on Locked macOS Devices

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.5. An attacker with physical access to a locked device may be able to view sensitive user information. This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. An attacker with physical access to a locked device may be able to view sensitive user information.
References

Thu, 14 May 2026 14:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Wed, 13 May 2026 18:15:00 +0000

Type Values Removed Values Added
Title Physical Access Vulnerability Allows Sensitive Data Exposure on Locked macOS Devices

Wed, 13 May 2026 16:30:00 +0000

Type Values Removed Values Added
Title Information Disclosure via Physical Access on Locked macOS Devices
Weaknesses CWE-200

Wed, 13 May 2026 14:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-522
Metrics cvssV3_1

{'score': 4.6, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 11 May 2026 22:15:00 +0000

Type Values Removed Values Added
Title Information Disclosure via Physical Access on Locked macOS Devices
First Time appeared Apple
Apple macos
Weaknesses CWE-200
Vendors & Products Apple
Apple macos

Mon, 11 May 2026 20:45:00 +0000

Type Values Removed Values Added
Description This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.5. An attacker with physical access to a locked device may be able to view sensitive user information.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-27T20:14:19.063Z

Reserved: 2026-03-03T16:36:03.991Z

Link: CVE-2026-28961

cve-icon Vulnrichment

Updated: 2026-05-13T13:22:03.065Z

cve-icon NVD

Status : Modified

Published: 2026-05-11T21:18:57.090

Modified: 2026-07-27T21:16:50.220

Link: CVE-2026-28961

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T08:45:06Z

Weaknesses
  • CWE-522

    Insufficiently Protected Credentials