CVEvulnerability
CVE-2026-43759
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-07-27
- Last modified
- 2026-07-28
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-200
Description
An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data.
Affected configurations
• apple macos (>= 26.0 < 26.6)
• apple watchos (< 26.6)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/128067 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/128068 Release Notes, Vendor Advisory