CVE-2026-28881

Exploited in the Wild

NIST CVSS Scores

CVSS v3.1 Base Score: 5.5 (Medium)

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA CVSS Scores

CVSS v3.1 Base Score: 5.3 (Medium)

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Operating Systems Impacted

macOS Tahoe (prior to 26.4)

Additional Resources

NVD CVE-2026-28881
NVD CVE-2025-00000
About the security content of macOS Tahoe 26.4

Description

CVE-2026-28881 is a privacy issue in the iCloud component of macOS related to how sensitive data was moved/stored. According to Apple's advisory, the flaw could allow an app to access sensitive user data. This was a jointly-credited discovery: Ye Zhang of Baidu Security, Ryan Dowd (@_rdowd), and Csaba Fitzl (@theevilbit) of Iru.

Impact

Exploitation of this vulnerability could allow a local app to access sensitive user data it shouldn't have access to via iCloud. Apple addressed the issue by moving the sensitive data to a protected location in macOS Tahoe 26.4.

Stay up to date

Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.

Description

Impact

CVE-2026-28827

CVE-2025-24201

CVE-2026-20617

Stay up to date