Security Vulnerability Report
中文
CVE-2026-28830 CVSS 4.7 MEDIUM

CVE-2026-28830

Published: 2026-05-11 21:18:51
Last Modified: 2026-05-12 19:47:44

Description

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.

CVSS Details

CVSS Score
4.7
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Configurations (Affected Products)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* - VULNERABLE
macOS Tahoe < 26.4

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# PoC Concept for Race Condition (CVE-2026-28830) # This is a simulated demonstration of a Time-of-Check to Time-of-Use (TOCTOU) race condition. import threading import time class RaceConditionExploit: def __init__(self): self.shared_resource = "sensitive_data.txt" self.lock = threading.Lock() def malicious_access(self): # Thread 1: Attempting to access data rapidly while True: try: # Simulate the race window with self.lock: print("[Malicious App] Trying to access protected resource...") # If validation logic is slow, this might succeed if self.check_permission(): data = self.read_data() print(f"[!] Exploit Success! Data: {data}") break except Exception as e: continue def check_permission(self): # Simulate the system's validation step time.sleep(0.001) # Introduce delay to widen the race window return True # Assume validation passes due to race def read_data(self): # Simulate reading the sensitive file return "USER_SENSITIVE_TOKEN_123" if __name__ == "__main__": exploit = RaceConditionExploit() # In a real scenario, this would be triggered by user interaction (UI:R) exploit.malicious_access()

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-28830", "sourceIdentifier": "[email protected]", "published": "2026-05-11T21:18:51.207", "lastModified": "2026-05-12T19:47:43.853", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.0, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-362"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionEndExcluding": "26.4", "matchCriteriaId": "DCFD15D9-91CA-4342-9F7E-A219B459B755"}]}]}], "references": [{"url": "https://support.apple.com/en-us/126794", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}]}}