AppleCVE-2026-43792
Apple Safari: improper authorization
Medium6.5CVE-2026-43792 · Published Jul 27, 2026 · updated Jul 29, 2026
An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Safari Product | < 26.6 | 26.6 |
| macOS Product | < 26.6 | 26.6 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Severity from
- CISA (its enrichment of the CVE record)
- Weakness
- CWE-285
More Apple advisories
All Apple| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 27 | Apple iOS and iPadOS: out-of-bounds write | Critical9.8 | 18.7.10+3 more |
| Jul 27 | Apple iOS and iPadOS: out-of-bounds write | Critical9.8 | 18.7.10+3 more |
| Jul 27 | Apple iOS and iPadOS: buffer overflow | Critical9.8 | 18.7.10+2 more |
| Jul 27 | Apple iOS and iPadOS: out-of-bounds write | Critical9.8 | 18.7.10+2 more |
| Jul 27 | Apple iOS and iPadOS: integer overflow | Critical9.8 | 18.7.10+3 more |
| Jul 27 | A memory initialization issue was addressed with improved memory handling | Critical9.8 | 26.6+2 more |