CVE-2026-28910: Breaking the macOS App Sandbox, TCC and Code Signing with Archive Utility

Attribution. This is an original English rewrite based on “CVE-2026-28910: Breaking macOS App Sandbox Data Containers, TCC, and Hijacking Apps Using Archive Utility” by Talal Haj Bakry and Tommy Mysk on Mysk Blog (mysk.blog, published 19 May 2026). All research, screenshots, videos, code listings and the disclosure timeline are the original authors’ work. Every figure,…

https://core-jmp.org/2026/05/cve-2026-28910-macos-archive-utility-sandbox-tcc-app-hijacking/