CVE-2026-28952: Apple macOS Kernel Vuln — Public PoC, Low EPSS

Sun, 12 Jul 2026 11:56:34 +0000

Engineer — Plan: Kernel privilege-escalation vulnerability with a public PoC but EPSS of 0.01 and no KEV listing indicates no active exploitation yet; apply the Apple security update for macOS 26.5 in your next patching cycle, prioritizing any macOS-based CI/CD or developer endpoints where LPE would be high-impact.
SOC/IR — Skip
Leader — Skip
Signals: CVE-2026-28952 — CISA KEV: not listed, EPSS 0.01, public PoC on GitHub

Macos on CuraSec