{"id":"CVE-2026-28834","state":"PUBLISHED","title":"A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to cause unexpec","description":"A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to cause unexpected system termination.","publishedAt":"2026-03-25T00:32:21.574Z","updatedAt":"2026-04-02T18:19:08.265Z","severity":{"score":5.1,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.5","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.5","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.4","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/126794","https://support.apple.com/en-us/126795","https://support.apple.com/en-us/126796"],"weaknesses":["CWE-362"],"ingestedAt":"2026-10-29T20:11:31.369Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/28xxx/CVE-2026-28834.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-28834","state":"PUBLISHED","datePublished":"2026-03-25T00:32:21.574Z","dateUpdated":"2026-04-02T18:19:08.265Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2026-03-03T16:36:03.969Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to cause unexpected system termination."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.5","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.5","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.4","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/126794"},{"url":"https://support.apple.com/en-us/126795"},{"url":"https://support.apple.com/en-us/126796"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to cause unexpected system termination"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:19:08.265Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-03-25T14:32:40.266186Z","id":"CVE-2026-28834","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-362","type":"CWE","lang":"en","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-25T14:33:00.462Z"}}]}}}