Apple Fixes Two macOS Sandbox Escape Vulnerabilities
Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Mar 25, 2026
Apple disclosed two high-severity macOS vulnerabilities, CVE-2026-28891 and CVE-2026-28817, that could allow an application or sandboxed process to escape sandbox restrictions. Both flaws were attributed to race conditions, classified as CWE-362, and carried the same CVSS v3.1 vector: AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating local exploitation with potentially severe impact to confidentiality, integrity, and availability.
Apple said the issues were remediated through additional validation and improved state handling. Fixes were released for macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4, and organizations running affected macOS systems should prioritize those updates because successful exploitation could let untrusted code break out of the sandbox and operate with broader system access.
