What is GHSA-r4rg-rrj9-352x?

GHSA-r4rg-rrj9-352x is a security advisory published by GitHub Security Advisories with Medium severity. The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS...

Which CVE IDs does GHSA-r4rg-rrj9-352x cover?

GHSA-r4rg-rrj9-352x covers the following CVE IDs: CVE-2026-28849. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r4rg-rrj9-352x?

GHSA-r4rg-rrj9-352x has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-r4rg-rrj9-352xMediumCVSS 5.5

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS...

Vendor

GitHub Security Advisories

Published

July 27, 2026

Last Modified

August 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-28849 →

📋 Description

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-28849
https://support.apple.com/en-us/128071
https://support.apple.com/en-us/128072
https://support.apple.com/en-us/127115
https://github.com/advisories/GHSA-r4rg-rrj9-352x