macOS logic flaw enabling app data access (fixed in 15.7.8, 14.8.8, 26.6)
CVE-2026-43756 Published on July 27, 2026
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.
Vulnerability Analysis
CVE-2026-43756 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Types
What is an AuthZ Vulnerability?
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-43756 has been classified to as an AuthZ vulnerability or weakness.
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2026-43756 has been classified to as an Information Disclosure vulnerability or weakness.
Products Associated with CVE-2026-43756
stack.watch emails you whenever new vulnerabilities are published in Apple macOS or Apple Macos Sonoma. Just hit a watch button to start following.
Affected Versions
Apple macOS:- Before 14.8.8 is affected.
- Before 15.7.8 is affected.
- Before 26.6 is affected.