Medium · 6.1 CVE-2026-28836 EUVD-2026-78031GHSA-54j8-mp7q-f5gc

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be…

Published Sep 14, 2026 · Updated Sep 17, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 14.8.8	14.8.8

Advisories 2

WID-SEC-2026-3352 Apple iOS, iPadOS, macOS Tahoe, macOS Golden Gate, macOS Sequoia und Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 26, 2026
WID-SEC-2026-2543 Apple macOS (Tahoe, Sonoma und Sequoia): Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026

References

https://support.apple.com/en-us/128072