CVE catalog

CVE-2026-28954

A file quarantine bypass was addressed with additional…

[CVE catalog]

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A maliciously crafted disk image may bypass Gatekeeper checks.

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedipados18.7.9UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportediphone_os18.7.9UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedmacos14.8.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedmacos15.7.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedmacos26.5UnknownSource applicability is not establishedProvider not reported
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedipados18.7.9UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportediphone_os18.7.9UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedmacos14.8.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedmacos15.7.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedmacos26.5UnknownSource applicability is not establishedProvider not reported
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "ipados",
      "fixed_version": "18.7.9",
      "applicability_unknown": true
    },
    {
      "name": "iphone_os",
      "fixed_version": "18.7.9",
      "applicability_unknown": true
    },
    {
      "name": "macos",
      "fixed_version": "14.8.7",
      "applicability_unknown": true
    },
    {
      "name": "macos",
      "fixed_version": "15.7.7",
      "applicability_unknown": true
    },
    {
      "name": "macos",
      "fixed_version": "26.5",
      "applicability_unknown": true
    },
    {
      "name": "ipados",
      "ranges": [
        {
          "fixed": "18.7.9",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28954",
      "fixed_version": "18.7.9",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-28954",
      "provider_updated_at": "2026-10-26T18:10:00.173"
    },
    {
      "name": "iphone_os",
      "ranges": [
        {
          "fixed": "18.7.9",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28954",
      "fixed_version": "18.7.9",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-28954",
      "provider_updated_at": "2026-10-26T18:10:00.173"
    },
    {
      "name": "macos",
      "ranges": [
        {
          "fixed": "26.5",
          "introduced": "26.0",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28954",
      "fixed_version": "26.5",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-28954",
      "provider_updated_at": "2026-10-26T18:10:00.173"
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]