CVE-2026-43782: Apple macOS sensitive data access due to insufficient checks

Executive brief

A security vulnerability in macOS could allow a malicious application to bypass privacy protections and access sensitive user data. This affects computers running macOS Sequoia, Sonoma, and Tahoe. Apple has released software updates to address this issue by improving internal security checks.

Technical details

A vulnerability in macOS was identified where an application could potentially access sensitive user data due to insufficient validation checks. The issue is addressed through improved logic and checks within the operating system. The attack requires a malicious application to be executed on the local system. Apple has released patches in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products

• Apple macOS Sequoia Before 15.7.8
• Apple macOS Sonoma Before 14.8.8
• Apple macOS Tahoe Before 26.6

Timeline

• 2026-07-27: advisory
• 2026-07-27: disclosed
• 2026-07-27: patched

References

• https://support.apple.com/en-us/128067
• https://support.apple.com/en-us/128071
• https://support.apple.com/en-us/128072