AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleCVE-2026-43665

Apple macOS: missing authorization

Apple

CVE-2026-43665 · Published Jul 27, 2026 · updated Jul 29, 2026

Medium5.5
Fix: upgrade to 14.8.8 or later (2 fixed versions below)
Apple advisory

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy VNC password configured for Screen Sharing.

Affected versions

PackageAffectedFixed in
macOS
Product
< 14.8.814.8.8
< 15.7.815.7.8
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-862

More Apple advisories

All Apple
Critical 9.8Jul 27Apple iOS and iPadOS: out-of-bounds writeCVE-2026-64769fixed in 18.7.10 +3Critical 9.8Jul 27Apple iOS and iPadOS: out-of-bounds writeCVE-2026-64770fixed in 18.7.10 +3Critical 9.8Jul 27Apple iOS and iPadOS: buffer overflowCVE-2026-64771fixed in 18.7.10 +2Critical 9.8Jul 27Apple iOS and iPadOS: out-of-bounds writeCVE-2026-64772fixed in 18.7.10 +2Critical 9.8Jul 27Apple iOS and iPadOS: integer overflowCVE-2026-64774fixed in 18.7.10 +3Critical 9.8Jul 27A memory initialization issue was addressed with improved memory handlingCVE-2026-64775fixed in 26.6 +2