CVE-2026-28924: Macos: yarış durumu

Açıklama (NVD)

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to access Contacts without user consent.

Özet bilgiler

Ürün

Apple Macos

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,31 (yüzdelik 24)

CWE

CWE-362

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• support.apple.com
• support.apple.com
• support.apple.com
• CWE-362