CVE-2026-43782
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Improved checks in macOS. An app may access sensitive user data.
Risk Assessment
Risk of exposing sensitive data, potentially leading to privacy breaches and identity theft.
Recommendation
Update macOS to Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6.
Other vulnerabilities in Apple macOS
See all- CVE-2026-64767Critical
A buffer overflow vulnerability in macOS allows a remote attacker to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-64731Critical
Path validation was improved. The issue affects macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
- CVE-2026-64704Critical
A type confusion issue was addressed with improved memory handling. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64703Critical
A use after free issue was addressed with improved memory management. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause a denial-of-service.
- CVE-2026-64702Critical
An access issue was addressed with additional sandbox restrictions. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to break out of its sandbox.
- CVE-2026-64698Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or read kernel memory.
- CVE-2026-64697Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-64696Critical
A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. A remote user may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-64694Critical
An integer overflow issue was fixed with improved input validation. The vulnerability affects macOS systems. An app may cause unexpected system termination.
- CVE-2026-43793Critical
Improved validation of environment variables in macOS. An app may cause unexpected system termination.
Original NVD description (English source)
This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.