A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper ch…

Medium CVSS 5.5

CVECVE-2026-28914

First seen2026-07-27 22:15 UTC

Disclosed2026-05-11 21:18 UTC

Last updated2026-07-27 22:15 UTC

Channel statusauto

Summary

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://support.apple.com/en-us/127115 Release Notes
https://support.apple.com/en-us/128071
https://support.apple.com/en-us/128072

Timeline

2026-07-27 nvd_ingest NVD