CVE-2026-28830

MEDIUM

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.

StatusAnalyzed

설명

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.

Score Summary

CVSS Score: 4.7
Version: 3.1
VPI: 47
Why this VPI (explainable, experimental)
VPI breakdown
Impact 47.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 47.00
VPI formula vpi-v1
EPSS: 0.08%
(상위 0.40%)
Attack Vector: Local Access
High Complexity
No Privileges
User Interaction Required
Scope Unchanged
High Confidentiality Impact
No Integrity Impact
No Availability Impact

Details

CWE Weakness Classification

References (1)

Affected Products (1)

Impact	47.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	47.00