AppleCVE-2026-43756

Apple macOS: information disclosure

Medium5.5CVE-2026-43756 · Published Jul 27, 2026 · updated Jul 28, 2026

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.

Apple advisory

Affected versions

Package	Affected	Fixed in
macOS Product	< 14.8.8	14.8.8
	< 15.7.8	15.7.8
	< 26.6	26.6

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from: CISA (its enrichment of the CVE record)
Weakness: CWE-200, CWE-285

More Apple advisories

All Apple

Date	Advisory	Severity	Fixed in
Jul 27	Apple iOS and iPadOS: out-of-bounds write Critical9.8Jul 27 CVE-2026-6476918.7.10+3 more	Critical9.8	18.7.10+3 more
Jul 27	Apple iOS and iPadOS: out-of-bounds write Critical9.8Jul 27 CVE-2026-6477018.7.10+3 more	Critical9.8	18.7.10+3 more
Jul 27	Apple iOS and iPadOS: buffer overflow Critical9.8Jul 27 CVE-2026-6477118.7.10+2 more	Critical9.8	18.7.10+2 more
Jul 27	Apple iOS and iPadOS: out-of-bounds write Critical9.8Jul 27 CVE-2026-6477218.7.10+2 more	Critical9.8	18.7.10+2 more
Jul 27	Apple iOS and iPadOS: integer overflow Critical9.8Jul 27 CVE-2026-6477418.7.10+3 more	Critical9.8	18.7.10+3 more
Jul 27	A memory initialization issue was addressed with improved memory handling Critical9.8Jul 27 CVE-2026-6477526.6+2 more	Critical9.8	26.6+2 more

Affected versions

More Apple advisories

Critical advisories by email