CVE-2026-28817

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A sandboxed process may be able to circumvent sandbox restrictions.

• CWE-362

• https://support.apple.com/en-us/126794Release Notes, Vendor Advisory
• https://support.apple.com/en-us/126795Release Notes, Vendor Advisory
• https://support.apple.com/en-us/126796Release Notes, Vendor Advisory

Published

Mar 25, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-28811Debug Messages Revealing Unnecessary Information in Apache J…7.5
• CVE-2026-28812UserManager lack of checks allows impersonation in Apache JS…9.8
• CVE-2026-28813Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijackin…8.8
• CVE-2026-28814Arbitrary Wiki Markup rendering due to lack of authenticatio…7.5
• CVE-2026-28815A remote attacker can supply a short X-Wing HPKE encapsulate…7.5
• CVE-2026-28816A path handling issue was addressed with improved validation…4
• CVE-2026-28818A logging issue was addressed with improved data redaction. …5.3
• CVE-2026-28819An out-of-bounds write issue was addressed with improved bou…5.4
• CVE-2026-2882A vulnerability was found in D-Link DWR-M960 1.01.07. This i…8.8
• CVE-2026-28820This issue was addressed with improved checks. This issue is…5.3
• CVE-2026-28821A validation issue existed in the entitlement verification. …8.4
• CVE-2026-28822A type confusion issue was addressed with improved memory ha…6.2