Back to search
CVE-2026-28924
Published: May 11, 2026
Modified: May 12, 2026
PUBLISHED
Description
A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to access Contacts without user consent.
| Vendor | Product | Versions |
|---|---|---|
Apple | macOS | affected 0 - < 14.8.7affected 0 - < 15.7.7affected 0 - < 26.5 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now